Afflelou
October 26, 2026
•[ ransomware, retail, healthcare ]
Afflelou was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Retail & E-Commerce. Country: France. Alain Afflelou is a leading European franchisor of optical and hearing aid products, founded in France in 1972. The company operates a robust network of over 1,500 stores across 20 countries, driven by aggressive marketing innovations like its famous "Tchin-Tchin" multi-pair offer.
Key Figures
Network Revenue: 1.13 billion (TTC) for the fiscal year ending July 2025
Corporate Revenue: 447.3 million (excl. taxes), generated from corporate stores and franchise fees.
Core Segments: Eyewear and audioprosthetics. [Sector: Retail]
Personify Health
October 17, 2026
•[ ransomware, healthcare, leak ]
Personify Health was listed as a victim on the leak site of the Helix ransomware group; the attack is estimated to have taken place on 2026-10-17. Sector: Healthcare. Country: United States of America. Personify Health records. Yearly revenue ~$500 million. GoFile links and passwords unlock in 12 hours.
Seetelhotels.de
October 19, 2026
•[ ransomware, financial, healthcare ]
Seetelhotels.de was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-10-19. Sector: Hospitality. Country: Germany. Website: Seetelhotels.de. Seetel Hotels (SEETEL Hotel GmbH & Co. Betriebs KG) has been notified that a substantial volume of confidential and internal corporate data has been compromised.
The affected data includes, but is not limited to:
Full guest identity records, government-issued passport and ID numbers, payment card details (credit card numbers, CVVs, and expiration dates), direct booking notes, special requests, dietary restrictions, documented allergies, and medical/health-related accommodation preferences.
Invoices, payment transaction logs, accounts receivable and payable (Debitorenbuchhaltung / Kreditorenbuchhaltung) records, internal financial audits, and controlling documentation.
chooseultimate.com
October 19, 2026
•[ ransomware, healthcare, retail ]
chooseultimate.com was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-10-19. Sector: Retail & E-Commerce. Country: United States of America. Website: chooseultimate.com. Ultimate Health Plans is a local Medicare Advantage Plan based in Spring Hill, Florida, serving vari...
Company #96
October 20, 2026
•[ ransomware, healthcare ]
Company #96 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-20. Country: Trinidad & Tobago. medical laboratory and diagnostics Trinidad and Tobago | [PENDING EXPOSURE]
Beach Eye Medical Group
October 15, 2026
•[ ransomware, leak, healthcare ]
Beach Eye Medical Group was listed as a victim on the leak site of the Dark Project ransomware group; the attack is estimated to have taken place on 2026-10-15. Sector: Healthcare. Country: United States of America. Website: beacheye.com. About Beach Eye Medical Group The latest eye-care technology combined with decades of experience makes Beach Eye Medical Group a center of excellence for eye care. ur team of board-certified doctors is led by Dr. Samir Shah, a specialist in complex eye surgery with a sub-specialty in cataract, cornea, and refractive surgery. The company's physician team includes Dr. DruAnn McCluskey, who provides care for a variety of eye conditions, from cornea and external disease to dry eye and glaucoma. Dr. Kevin Jwo specializes in treating cataracts and glaucoma through a variety of medical, laser, and surgical techniques. As a result of the attack on Company Beach Eye Medical Group, more than 200 GB of confidential data was stolen. The data comprises more than 250,000 files containing information about the organizations employees and their patients, medical records, and doctors reports, as well as other important company information.
olyortho.com
October 21, 2026
•[ ransomware, healthcare ]
olyortho.com was listed as a victim on the leak site of the BrainCipher ransomware group; the attack is estimated to have taken place on 2026-10-21. Sector: Healthcare. Country: United States of America. Website: olyortho.com.
Heritage Senior Living
October 21, 2026
•[ ransomware, healthcare, misconfiguration ]
Heritage Senior Living was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-21. Sector: Healthcare. Country: United States of America. healthcare support services United States | Network security configuration of a healthcare support provider; Internal network segmentation maps; Remote access account structures | [NOT PAID EXPOSED]
AMSAM
October 22, 2026
•[ ransomware, healthcare ]
AMSAM was listed as a victim on the leak site of the bravox ransomware group; the attack is estimated to have taken place on 2026-10-22. Country: France. Website: www.amsam.net. Social, Healthcare and Home Care Services.
Mountain Rheumatology
October 26, 2026
•[ ransomware, healthcare ]
Mountain Rheumatology was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Healthcare. Country: United States of America. Website: www.mountainrheumatology.com.
Premier Medical Group
October 26, 2026
•[ ransomware, healthcare ]
Premier Medical Group was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Healthcare. Country: United States of America. Website: www.premiermedicalhv.com.
MediSolution
October 27, 2026
•[ ransomware, healthcare, technology ]
MediSolution was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Healthcare. [AI generated] MediSolution was a Canadian software company based in Montreal, Quebec, specializing in enterprise resource planning and management software solutions for the public sector, including healthcare, local government, and education institutions. It provided financial management, human resources, and payroll software systems. The company operated in the enterprise software and information technology industry before being acquired and integrated into Harris Computer Systems.
Company #93
October 19, 2026
•[ ransomware, healthcare ]
Company #93 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-19. Country: United States of America. healthcare support services United States | [PENDING EXPOSURE]
Company #99
October 21, 2026
•[ ransomware, healthcare, finance ]
Company #99 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-21. health insurance administration Guayaquil, Ecuador | [PENDING EXPOSURE]
Coastal Alabama Community College
October 21, 2026
•[ ransomware, education, financial ]
Coastal Alabama Community College was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-10-21. Sector: Education. Country: United States of America. Website: coastalalabama.edu. Coastal Alabama Community College demonstrates an extreme disregard for its own security and the security of its students and makes no attempt to address these deficiencies. Therefore, we are publishing their sensitive information, such as student education records, protected health information, financial aid and loan information, employee personnel files, Social Security numbers, and payment card data. They are also known for their incidents, and we are making this information publicly available to you. As a result, they violate laws such as HIPAA, FERPA, GLBA, and PCI DSS.
SGLA (Schwartz, Giannini, Lantsberger & Adamson)
October 22, 2026
•[ ransomware, finance, healthcare ]
SGLA (Schwartz, Giannini, Lantsberger & Adamson) was listed as a victim on the leak site of the spacebears ransomware group; the attack is estimated to have taken place on 2026-10-22. Sector: Professional Services. Country: United States of America. Website: www.sglacpas.com. Schwartz, Giannini, Lantsberger & Adamson (SGLA) Accountancy Corporation is a full-service certified public accounting firm based in Stockton, California, founded in 1988. The firm provides tax planning and compliance, audits, reviews and compilations, bookkeeping, payroll, outsourced CFO support, and business consulting for individuals and companies. It has particular experience with real estate, healthcare, nonprofits, affordable housing, common-interest realty associations, and local government clients. SGLA positions itself as a hands-on local CPA practice that combines traditional accounting work with practical advice to help clients stay compliant and grow.*After the timer expires, you will be able to freely download several fragments of the full archive for review. To purchase the complete archive, please contact our manager. https://www.sglacpas.com
mlh.com.lb
October 23, 2026
•[ ransomware, healthcare ]
mlh.com.lb was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-10-23. Sector: Professional Services. Country: Lebanon. Website: mlh.com.lb. Mount Lebanon Hospital University Medical Center (MLHUMC) is a healthcare institution that offers a...
Asisken Asistencia Médica S.A.
October 24, 2026
•[ ransomware, healthcare ]
Asisken Asistencia Mdica S.A. was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-24. Sector: Healthcare. Country: Argentina. health insurance administration Guayaquil, Ecuador | Identity and contact records of 139,006 named insurance clients, including identity document numbers and dates of birth; 383,159 policy beneficiary records with insured amounts; 402,988 medical and insurance claims with diagnosis codes and dollar amounts, current through 20 October 2026; Policy billing, home and work addresses and bank account details | [NOT PAID EXPOSED]
GPIC Projectos Con Instalacoes Lda
October 24, 2026
•[ ransomware, manufacturing, technology ]
GPIC Projectos Con Instalacoes Lda was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-24. Sector: Manufacturing. Country: Portugal. engineering design and installations Portugal | The full project archive of an engineering design office, spanning 2000 through 2026, including tender submissions, client proposals and technical drawings; Project folders for named clients including hospital installations for a private hospital group; Scanned office documents with activity through October 2026; A company bank account document with the full IBAN and tax number; Staff curricula with photos and personal details | [NOT PAID EXPOSED]
Andrews Advisory Group LLC
October 25, 2026
•[ ransomware, healthcare, finance ]
Andrews Advisory Group LLC was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-25. Sector: Professional Services. Country: United States of America. Financial Advisory & Restructuring (US) Chicago, Illinois, USA | Patient records with names and dates of birth from the patient database backup of December 2025 (3,698 records), taken from the office network; The complete patient database backup history, 2018 through 2025; More than 13,000 patient eye examination records with full ocular, medical and social history; OCT eye scan files from the imaging server on the network; Workstation profiles of office staff including stored system credentials | [NOT PAID EXPOSED]
