Morula IVF
September 25, 2026
•[ ransomware, healthcare ]
Morula IVF was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-09-25. Sector: Healthcare. Country: South Africa. Website: morulaivf.co.id. [AI generated] Morula IVF is a network of fertility clinics operating in Indonesia, specializing in in vitro fertilization (IVF) and other assisted reproductive technologies. It operates within the healthcare industry, specifically reproductive medicine, offering services such as fertility consultations, egg and sperm preservation, and infertility treatments. The company has multiple clinic locations across major Indonesian cities, serving patients seeking fertility treatment options.
Platinum Healthcare Staffing
September 25, 2026
•[ ransomware, healthcare ]
Platinum Healthcare Staffing was listed as a victim on the leak site of the metaencryptor ransomware group; the attack is estimated to have taken place on 2026-09-25. Sector: Healthcare. Country: United States of America. Website: platinumhs.com. Platinum Healthcare Staffing is a healthcare staffing agency headquartered in Lafayette, USA, founded in 2005. It provides nursing and allied healthcare professionals, including RNs, LPNs, and CNAs, to hospitals, clinics, and medical facilities.
FTAPI Software
September 25, 2026
•[ ransomware, technology, healthcare ]
FTAPI Software was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-25. Sector: Technology. Country: United States of America. Website: ftapi.com. ftapi.com zoominfo.com/c/ftapi-software/346927067 FTAPI (founded 2010, Munich, Germany) is a software company offering a secure, GDPR-compliant platform for exchanging sensitive business data and automating workflows encrypted email and file transfer, virtual data rooms, digital forms and no-code process automation. It serves 2,000+ organizations and over a million users, mainly in public administration, healthcare, insurance and industry, with all data hosted exclusively in Germany under strict certifications (ISO 27001, BSI C5, SOC 2) and optional zero-knowledge encryption. Its core selling point is European digital sovereignty a compliant alternative to US cloud tools like Dropbox under GDPR, NIS-2 and DORA regulations. In 2025 it raised 65 million from PE investors Armira and Tikehau Capital, which took control to fund EU expansion and acquisitions. The company employs around 150 people and targets becoming a leading European player in secure data exchange by 202829.
Brancoptica
September 21, 2026
•[ ransomware, retail, healthcare ]
Brancoptica was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Other. Country: Portugal. Website: brancoptica.pt. brancoptica.pt Brancptica, Lda is a family-owned optical retail chain founded in 1961 in Cartaxo, Portugal (Ribatejo region) by Jos Francisco Branco de Oliveira, originally as "Oculista do Cartaxo." Now led by the founder's son Rui Oliveira, the company operates 20+ stores across three districts Santarm, Lisbon, and Leiria under the banner of the international Opticalia alliance (part of EssilorLuxottica). Beyond selling eyewear (Ray-Ban, Gucci, and designer brands), it provides professional optometry and orthoptics services with a team of 20+ qualified specialists, and runs its own e-commerce store on Shopify. The company employs roughly 3151 people with estimated revenue in the 210 million range. It is a rare example of a family optical chain that has survived and grown amid the mass decline of independent opticians in Portugal, winning the pticaPro 2024 Social Responsibility Award.
ANP Health
September 21, 2026
•[ ransomware, healthcare ]
ANP Health was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Healthcare. Country: Brazil. Website: anphealthsolutions.com. anphealthsolutions.com ANP Health Services Inc. is a Florida-based recruitment agency specializing in placing foreign-trained nurses into U.S. hospitals, with a strong focus on Latin America (especially Venezuela). Founded in 2019 by Nelson Hurtado, a Venezuelan immigrant and registered nurse, the company provides an end-to-end service: credential validation, NCLEX exam preparation, English training, direct-hire placement with 150+ partner hospitals, and visa sponsorship (EB-3 Green Card for the nurse and family). It has helped over 2,000 nurses from 28 countries, with candidates typically earning $70100K per year plus sign-on bonuses. The company is a Certified Ethical Recruiter (CGFNS Alliance) one of only about 16 accredited firms in the U.S. and employs roughly 3050 people across 9 countries. Estimated revenue is $1050 million annually.
SMCare
September 28, 2026
•[ ransomware, healthcare ]
SMCare was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Healthcare. Scenario Management is a specialist support provider based in Lancashire, serving areas including Blackpool, Wyre, Fylde, and Preston. The company offers 24-hour supported living and residential services, as well as short stay respite care for individuals with learning disabilities, complex needs, autism, and associated mental health issues. Their services are designed for those who may challenge services or have forensic backgrounds. Scenario Management aims to provide comprehensive support tailored to the needs of their clients.
bio-strath.com
September 28, 2026
•[ ransomware, healthcare ]
bio-strath.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Healthcare. Country: Switzerland. Website: bio-strath.com. The company was established in 1961 and operates the Bio-Strath brand, which is particularly associated with liquid and tablet nutritional
fedelmundo.com.ph
September 28, 2026
•[ ransomware, healthcare ]
fedelmundo.com.ph was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Other. Country: Philippines. Website: fedelmundo.com.ph. The institution traces its origins to 1957, when Filipino pediatrician and scientist Dr. Fe del Mundo established Children's Memorial Hospital
The Center for Kidney Care
September 28, 2026
•[ ransomware, healthcare ]
The Center for Kidney Care was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Healthcare. Country: United States of America. Website: https:renaldocs.com. The Kidney Center is a leading provider of nephrology services in South Jersey, specializing in the diagnosis and treatment of kidney disease and hypertension. Due to their negligence in their own safety and the safety of their clients, confidential medical information, including medical records, lab/dialysis/transplant data, billing/insurance data, and patient demographics, was compromised and exposed. Their cybersecurity breaches violate the HIPAA privacy and security regulations.
coosalud.com
September 28, 2026
•[ ransomware, healthcare ]
coosalud.com was listed as a victim on the leak site of the threeam ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Healthcare. Country: Colombia. Website: coosalud.com. Coosalud EPS (Coosalud Entidad Promotora de Salud S.A.) is one of the major health promotion entities (EPS) in Colombia, primarily managing subsidized and contributory healthcare regimes with multi-million-peso operating volumes. Alongside its sub
Arnold Center
September 28, 2026
•[ ransomware, healthcare ]
Arnold Center was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-28. Country: United States of America. Website: www.arnoldcenter.org.
northeastrehab.com
September 29, 2026
•[ ransomware, healthcare, leak ]
northeastrehab.com was listed as a victim on the leak site of the BrainCipher ransomware group; the attack is estimated to have taken place on 2026-09-29. Sector: Healthcare. Country: United States of America. Website: northeastrehab.com. [AI generated] N/A
I don't have reliable, verified information about a specific company operating at this domain. Rather than provide potentially inaccurate details about its services, industry specifics, or operational location, I'm flagging this as unconfirmed. If you have access to threat intelligence databases, WHOIS records, or can share verified details about this domain, I can help analyze that information instead.
Stockham Construction
September 28, 2026
•[ ransomware, manufacturing, technology ]
Stockham Construction was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Manufacturing. Country: United States of America. Website: stockhamconstruction.com. Stockham Construction, Inc. is a commercial union subcontractor with over 30 years of experience specializing in interior and exterior metal stud framing, drywall, finish taping, acoustical ceilings, and commercial door installation. The company is dedicated to quality, integrity, and client satisfaction, aiming to build lasting partnerships that contribute to the success of their clients' ventures. They serve a diverse range of commercial construction projects, including advanced technology, health services, and education sectors, ensuring high standards of quality and precision. Their collaborative approach integrates multiple trades to streamline the construction process, delivering exceptional results while minimizing disruptions.
The company headquarters is located in 475 Portal Street, Cotati, CA 94931, United States. 201-500 Employees
Josee Bendaaa-Guerrero Asociados
September 29, 2026
•[ ransomware, finance, technology ]
Josee Bendaaa-Guerrero Asociados was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-29. Sector: Professional Services. Country: Belize. Website: guybendana.com. guybendana.com Guy Jos Bendaa-Guerrero & Asociados (roots to 1907, Managua, Nicaragua) is the leading intellectual-property boutique in Nicaragua, specializing in trademarks, patents, industrial designs, copyright, plant varieties and anti-counterfeiting, plus corporate law, regulatory (sanitary registrations) and litigation. It traces its lineage over 100 years through three legal dynasties founders Henry Caldera & Henry Caldera-Pallais (who secured Nicaragua's first Trademark Law in 1907 and co-founded ASIPI in 1964), then the Caldera generation, and since 1985 Dr. Guy Jos Bendaa-Guerrero (a former judge, law professor, author and ex-president of ANIPI) alongside his wife Blanca Aragn de Bendaa and their son Julin. Recognized as Nicaragua's top IP firm by Chambers and Partners, Legal 500 and World Trademark Review 1000, it serves global pharmaceutical, technology, fashion and consumer-goods clients from its Bolonia district office in Managua. With 510 lawyers
Agospap
September 29, 2026
•[ ransomware, hack, healthcare ]
Agospap was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-29. Country: Greece. Website: agospap.com. agospap.com zoominfo.com/c/agospap/357851962 AGOSPAP (founded 2 November 1981, Paris) is a non-profit association (loi 1901) that manages social, cultural and leisure benefits for ~150,000 staff of the AP-HP hospital system and the City of Paris plus ~20 affiliated public bodies effectively a cross-institutional works-council fund. With 45 employees and income tied to 0.5% of the two founders' payroll (28M/year in subsidies; 49M total budget), it provides income-scaled holiday stays, children's camps (417), a cultural ticketing platform, Christmas gifts, social grants (birth/marriage/service medals) and the new Pass'Sport sports voucher. Led by president Jean-Paul Brandela (since Oct 2023) and director-general Anne Schaetzel (since 2013), it is ISO 9001-certified and holds an Atout France travel-operator license with UNAT financial guarantees. Funding remains politically sensitive: a 2M cut by the City in 2023 briefly suspended camp registrations
Custom Rx Shoppe
September 29, 2026
•[ ransomware, healthcare, hack ]
Custom Rx Shoppe was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-29. Sector: Healthcare. Country: United States of America. Website: customrxshoppe.com. customrxshoppe.com zoominfo.com/c/custom-rx-shoppe-pharmacy/460515026 Custom Rx Shoppe (The Custom Prescription Shoppe, LLC, founded 2003 in Bellingham/Ferndale, Washington) is a family-owned independent pharmacy founded by pharmacist Kevin Faris with partners Jay Solomon and Rick Adelstein. It combines three specialties retail pharmacy, long-term care pharmacy for nursing homes and assisted-living facilities (blister packaging, MAR records, med reviews) and a compounding lab making custom medications for people and pets, including hormone replacement therapy. The company serves Whatcom, Skagit and Island counties with free delivery, a mobile app and Medicare/Medicaid enrollment help, and books roughly $6.4 million in revenue with a team of under 10. Its owner also runs Happier at Home Bellingham, a senior home-care agency, giving the business an integrated pharmacy-plus-home-care model. Main challenges are competition from chain pharmacies/PBMs and tightening FDA rules on drug
Europrim
September 29, 2026
•[ ransomware, healthcare ]
Europrim was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-29. Sector: Healthcare. Country: France. Website: euro-prim.com. euro-prim.com zoominfo.com/c/europrim/1128488637 EURO-PRIM (founded 1998, Grenoble, France) is a local digital printing and reprographics company working together with its sister firm CINRA (est. 2003) as "Europrim & CINRA" two production sites, ~25 staff, serving students, SMEs, large regional companies and property-management firms. Services cover digital color/B&W printing up to A3+, large-format scanning up to A0, graphic design, finishing, personalized mass mailings (including for homeowners' association meetings) and prefecture-approved numbered event tickets. The business was taken over in 2016 by Fleur Henno and Philippe Baffert-Rey, who modernized the equipment and pushed an online store with 200+ products; it holds a solid 4.2/5 rating on 222 Google reviews. However, on 2 July 2025 the Grenoble commercial court opened redressement judiciaire (receivership)
Samwumed
September 29, 2026
•[ ransomware, healthcare, finance ]
Samwumed was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-29. Sector: Healthcare. Country: South Korea. Website: samwumed.org. samwumed.org zoominfo.com/c/samwumed/346685548 SAMWUMED (founded 1952, Cape Town) is a closed, self-administered medical aid scheme serving South African municipal workers roughly 35,000 members and 73,000 covered lives. It collects about R1.9 billion/year in contributions, kept reserves over R1.3 billion and posted a R14.3 million surplus in 2024 (solvency 68% vs the 25% legal minimum). Plans are income-banded and cheap (from ~R750/month with a 60% employer subsidy), covering hospitals, doctors, medication, dentistry and optics. Led by Principal Officer Francina Mosoeu with a union-appointed board, it administers benefits with Medscheme across a network of private hospital groups. Key problems right now: membership shrinking ~15%/year as young people leave, and an ongoing court battle with the Melomed hospital group over contract exclusions plus the long-term threat of national health insurance reform.
West County Health Centers
September 30, 2026
•[ ransomware, healthcare ]
West County Health Centers was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Healthcare. Country: United States of America. West County Health Centers provides comprehensive, quality and accessible health care services to the communities of western Sonoma County.The company is a cohesive team of health care providers, support staff and volunteers dedicated to wellness, compassion, affordability and excellence of care. The company believes in non-judgmental and equal care for all members of the company's diverse community.
The company headquarters is located in 14045 Mill Street, Guerneville, CA 95446, United States. 51-200 Employees
Dr Damiel Pugliese
September 30, 2026
•[ ransomware, finance, healthcare ]
Dr Damiel Pugliese was listed as a victim on the leak site of the lamashtu ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Healthcare. Website: pugliese.lo. Dr. Daniel P. Pugliese is a certified Argentine accountant graduated from the prestigious University of Buenos Aires (U.B.A.). He is officially registered with the Professional Council of Economic Sciences of Buenos Aires (C.P.C.E.C.A.B.A.), which
