Skin Center
October 14, 2026
•[ ransomware, healthcare ]
Skin Center was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Healthcare. Country: United States of America. Website: skincenter.com. skincenter.com Skin Center dermatology clinic in Fort Lauderdale, FL (6550 N Federal Hwy, Suite 320) with 40+ years of practice roots (formerly Dr. Roger Stewart's clinic, led by Dr. Barry Galitzer since the 2010s). Full spectrum: medical dermatology, Mohs surgery for skin cancer, cosmetic injectables/lasers (Botox, CoolSculpting, Ultherapy, Fraxel), an Acne Center, aesthetics, and massage. The hidden headline: since 2021 it's owned by Forefront Dermatology (125+ clinics, backed by Canadian pension fund OMERS Private Equity) billing, records, and HR run through the network, not the local brand. Doctors rate excellent (Galitzer 4.7/5 on Healthgrades; Castle Connolly Top Doctor), but admin/office process is the weak spot complaints cite long waits, forgotten patients, and a brusque bedside manner. Team: ~10 providers (Galitzer, Fien, Perrotto, Soro, White, Brown + PAs), plus a second office in Pompano Beach; 200+ patients/day, 10,000 sq ft.
Adams Warehouse & Delivery, Inc.
October 16, 2026
•[ ransomware, leak, manufacturing ]
Adams Warehouse & Delivery, Inc. was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-10-16. Sector: Transportation. Country: United States of America. Website: Adams Warehouse & Delivery, Inc.. Adams Warehouse & Delivery, Inc. a family-owned freight and logistics company operating 11 warehouse facilities in the Houston metro area since 1976.
The dataset includes complete server backup mirrors from multiple drives (D:, E:, Data, Network Shares), capturing the company's entire digital footprint:
Sage/Peachtree accounting system for 8 entities spanning FY2007FY2025+, containing payroll, AR, AP, general ledger, and W-2 filing histories
5272 Social Security Numbers with full identity packages (name, DOB, address, phone, emergency contacts, health insurance IDs) across 4 entities
Domain administrator passwords saved in 4 RDP files, plus plaintext VPN credentials, WiFi passwords, and 18 database connections with blank passwords
WDS source code the company's custom warehouse distribution management system (VB6/.NET, multiple versions)
20+ years of customer data rate cards, operations logs, and contact lists for 100+ warehouse customers including Honeywell, Hospira, Amway, and Kaiser
Medical clinic employee data South Main Medical Clinic's bookkeeping within the Sage system, including physician SSN
11 Outlook PST email archives (largest: 1.5 GB)
First Dental Health
October 16, 2026
•[ ransomware, healthcare, leak ]
First Dental Health was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-16. Sector: Healthcare. Country: United States of America. Website: firstdentalhealth.com. firstdentalhealth.com First Dental Health, Inc. dental consulting company founded in 1995 and based in Sacramento, California. It is led by Chairman and CEO Michael Zhang together with founder Dr. Rick Kershner, a periodontist who previously worked with Western Dental, Coast Dental and Pacific Dental Services. The company transforms existing dental practices of 40 to 250 chairs through leadership development, culture building and operational excellence, typically raising performance by 40 to 80 percent within 2 to 4 years. Its flagship case is Sacramento Dentistry Group, which grew from around 330000 dollars monthly revenue in 2014 to roughly 640000 dollars by 2023. It also runs a DSO consolidation model that merges 6 to 10 practices under one brand with owners keeping equity and a 3 to 7 year exit path. The team has built 14 companies that made the Inc. 5000 list, positioning it as a small but high-impact operator in US dental business consulting.
Gio Dental Med Spa
October 16, 2026
•[ ransomware, healthcare ]
Gio Dental Med Spa was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-16. Sector: Healthcare. Country: Italy. Website: giodentalspa.com. giodentalspa.com Gio Dental & Med Spa private dental and aesthetic clinic founded around 2006 in Ciudad Jurez, Mexico, targeting patients from the US border region of El Paso and Las Cruces. The practice has about 6 employees and estimated annual revenue of roughly 430000 dollars, making it a small self-owned business with no external funding. Its business model is built on cross-border dental tourism, accepting American HMO and PPO insurance and transporting patients from El Paso directly to the clinic. Core services are dental implants, orthodontics, endodontics, veneers and oral surgery, plus a med spa division with botox, fillers and physiotherapy. The clinical founder and director is Dr. Mauro D. lvarez, an implantology specialist, working with a team of about five additional dentists. The company is positioned on price: complex dental procedures cost a fraction of US rates while offering full-service treatment and aftercare for American patients.
merkezilac_archives
October 13, 2026
•[ ransomware, healthcare, manufacturing ]
merkezilac_archives was listed as a victim on the leak site of the HYFLOCK ransomware group; the attack is estimated to have taken place on 2026-10-13. Sector: Other. Country: Turkey. Website: merkezilac.com. It is not a retail pharmacy, but a well-known large-scale comprehensive pharmaceutical and hygiene/disinfection product manufacturer with nearly a century of history. Heres a detailed introduction about the company: Company Background and Scale Founded: Established in 1934, it is one of the oldest local pharmaceutical factories in modern Turkey, with 100% Turkish capital. Production Base: Its modern central laboratory and factory are located in ekmeky, Istanbul, Turkey, with high-standard closed production workshops covering an area of 7,000 square meters. Certification Standards: Production is fully supervised by the Turkish Ministry of Health (T.C. Salk Bakanl) and has passed a series of international certifications including cGMP (current Good Manufacturing Practice), cGLP (Good Laboratory Practice), ISO 9001, and ISO 13485 (Medical Device Quality Management System). Core Products and Business Merkez la follows its iconic slogan #salkiinhijyenart (Hygiene is a prerequisite for health) and is the leader in Turkey for first aid, skin care, and disinfection products, with the most complete product categories and extremely high market share: 1. Disinfection and Anti-infection Series (core products): Produces various professional and consumer skin disinfectants, hand sanitizers, anti-infection foams, surgical wipes, and wound cleansers (common brands include Opakjel and sosol series). 2. Over-the-Counter (OTC) Medicines and Ointments: Produces skin ointments and creams, such as htamol ointment, Starbaz cream, sosol ointment, Vitamin E, and baby diaper rash cream (Piik Kremi) for skin care, burns, and eczema. 3. First Aid and Medical Consumables: It is the first and only company in the Turkish pharmaceutical industry to legally produce standardized first aid kits (Hzr medical kits, covering earthquakes, home, car, and industrial scenarios) and household/commercial medicine boxes. 4. Contract Manufacturing (CMO): In addition to its own brand, it also manufactures tablets, capsules, sprays, drops, liquids, and semi-solid ointments for over 50 global and local pharmaceutical companies. Industry Influence The companys service network is extremely extensive, directly supplying products to over 3,000 local pharmacists and more than 9,500 hospitals and clinics in Turkey, and exporting to multiple overseas countries. In international humanitarian aid (such as Red Crescent supplies and earthquake donations), it is also a major provider of medical supplies and surgical/first aid consumables in Turkey.
Shared Medical Technology
October 14, 2026
•[ ransomware, healthcare ]
Shared Medical Technology was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Healthcare. Country: United States of America. Website: sharedmedtech.com. sharedmedtech.com Shared Medical Technology, Inc. US medical equipment rental and service company founded in 2004, HQ in Schenectady, NY 7 offices (NY, MA, VA), ~4050 staff, no external funding raised. Core business: urgent rental of patient monitors, ventilators, CPAP, ultrasound, portable X-ray, infusion pumps, and bariatric/XL beds and chairs plus a niche no competitor claims to cover: State Regulatory Compliance certification for transporting XL/bariatric patients across 10+ states (vehicle inspections, certified safe transport). Real clients include Albany Medical Center, OrthoNY, Saratoga Surgery Center, Community Care Physicians, and Brooklyn Surgery Center. Self-developed logistics platform.
SBI Audiovisual Medinbox
October 14, 2026
•[ ransomware, healthcare, technology ]
SBI Audiovisual Medinbox was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Healthcare. Country: Spain. Website: sbiav.com. sbiav.com SBI Audiovisuel is a Quebec AV company founded in 1991 (HQ in Saint-Bruno-de-Montarville, ~11 staff), doing corporate event production sound, lighting, video, webcasting plus its signature niche: live streaming of surgical operations for medical training. It deploys its own CASTER mobile system and claims exclusive North American rights to France's Medinbox tech, which is used at hospitals like Mount Sinai NY; note SBI is an integrator, not the tech's manufacturer. Public activity runs from 2018 through 2026 (US tours, medical congresses, hiring), with no lawsuits or scam signs found. Revenue is not disclosed third-party estimates vary ($15M range), all unverified. Weak spots: no independent client reviews, no published certificates, and the site blurs its own brand with Medinbox's. For Quebec/Canada corporate events or live-surgery broadcasts it's a credible pick; for critical projects, verify team size, redundancy plans, and patient-data handling in writing.
BladeTech Inc
October 16, 2026
•[ ransomware, manufacturing, healthcare ]
BladeTech Inc was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-16. Sector: Manufacturing. Country: United States of America. Website: bladetechinc.com. dental laboratory (CAD/CAM manufacturing) Missouri, USA | Patient case designs of a dental laboratory with full patient names, tooth numbers and material/shade codes; CNC milling toolpaths and MillBox production job files for crowns, bridges and templates, September to October 2026 production; The complete 4.4 GB production archive of the lab | [NOT PAID EXPOSED]
Green Clinic
October 14, 2026
•[ ransomware, healthcare ]
Green Clinic was listed as a victim on the leak site of the Wallstreet ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Healthcare. Country: United States of America. Green Clinic is a community-based healthcare provider serving Ruston and North Central Louisiana. Founded in 1948, it brings primary care, pediatrics, specialty care, pharmacy, laboratory and imaging services together across its clinics
https://www.green-clinic.com/assets/news/green-clinic-cybersecurity-update-2026-10-08.pdf
Taiwan Otsuka Pharmaceutical
October 14, 2026
•[ ransomware, healthcare, leak ]
Taiwan Otsuka Pharmaceutical was listed as a victim on the leak site of the Eclipse ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Healthcare. Country: Taiwan. Website: www.otsuka.com.tw. Taiwan Otsuka Pharmaceutical was founded in 1974, with the philosophy of "pursuing the health and well-being of people worldwide". With the continuous efforts for the expansion and renewal of production equipment, pharmaceutical technology has continuously improved the quality. It has driven Taiwan's pharmaceutical industry to recognize the high-quality infusion containers. Taiwan Otsuka Pharmaceutical Factory was ranked as Grade A by the Department of Health in 1984. It was approved as a GMP pharmaceutical factory by the Department of Health and the Ministry of Economic Affairs of the Executive Yuan in 1986. It was approved as a PIC/S GMP pharmaceutical factory by the Department of Health of the Executive Yuan in 2010, and its products are exported to many countries in Asia, which proves that the quality has reached the high standard. Taiwan Otsuka Pharmaceutical also adheres to the business philosophy of "Otsuka people" and is committed to research and development. We will continue to strive for perfection and make unremitting efforts for the health of the people and the well-being of the society. At the same time, we hope that all sectors of society will continue to give us advice and guidance. We will also adhere to the spirit of "honesty, creativity, and service" to achieve our goals.
Holistic Health Group, Inc. (d/b/a Suncrafted)
October 15, 2026
•[ ransomware, healthcare, retail ]
Holistic Health Group, Inc. (d/b/a Suncrafted) was listed as a victim on the leak site of the spacebears ransomware group; the attack is estimated to have taken place on 2026-10-15. Sector: Healthcare. Country: United States of America. Website: suncraftedma.com. A vertically integrated cannabis company based in Middleborough, Massachusetts.It grows, manufactures, and sells medical and adult-use products under the Suncrafted brand, with a focus on sunlight, solventless live rosin, and minimal waste.477 Wareham Street, Middleborough, MA https://suncraftedma.com/
Alma Center Servizi Medicali S.r.l.
October 15, 2026
•[ ransomware, healthcare, leak ]
Alma Center Servizi Medicali S.r.l. was listed as a victim on the leak site of the spacebears ransomware group; the attack is estimated to have taken place on 2026-10-15. Sector: Healthcare. Country: Italy. Website: www.almacenter.it. Alma Center is a private multi-specialty diagnostic and outpatient medical center based in Mariglianella (province of Naples, Campania, Italy). Founded in 1984 by Dr. Emanuele Aliperti, it operates as a polispecialistico facility providing a broad range of diagnostic imaging, laboratory, and specialist services under both private and SSN (National Health Service) agreements. https://www.almacenter.it/
kidzrkooldental.com
October 15, 2026
•[ ransomware, healthcare, hack ]
kidzrkooldental.com was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-10-15. Sector: Healthcare. Country: United States of America. Website: kidzrkooldental.com. Kidz R Kool Pediatric Dentistry is a dental practice located in Peoria, AZ, specializing in pediatri...
Evolution Spine / All Labs
October 16, 2026
•[ ransomware, healthcare, manufacturing ]
Evolution Spine / All Labs was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-16. Sector: Healthcare. Medical device manufacturing (US) Texas, USA | FDA quality system records of a Texas spinal implant manufacturer: CAPAs, device history records for implant lots, management reviews, design drawings and audit files; The complete inventory database of the business, 317 tables, with hospital and surgical-center customers, purchase orders and implant lot shipping records; Finance records: purchase orders, tax forms and payroll timesheets; Hospital product packets for spinal fusion systems and staff mailbox exports | [NOT PAID EXPOSED]
Tech Electronics
October 12, 2026
•[ ransomware, technology, healthcare ]
Tech Electronics was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Technology. Country: United States of America. Website: techelectronics.com. Tech Electronics specializes in integrated building technology solutions that enhance safety, communication, and operational efficiency for various industries including healthcare, education, and government. Their extensive product offerings include fire and life safety systems, security solutions, and advanced communication technologies tailored to meet the unique needs of their clients. The company provides a range of services such as fire and security monitoring, inspections, and technology as a service to ensure optimal system performance. With multiple locations across the Midwest, Tech Electronics is committed to delivering responsive service and customized solutions to its clients.
The company headquarters is located in 6437 Manchester Avenue, St. Louis, MO 63139, United States.
201-500 Employees
Newport Beach Dentistry
October 14, 2026
•[ ransomware, healthcare ]
Newport Beach Dentistry was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Healthcare. Country: United States of America. Website: dentistryofnewportbeach.com. dentistryofnewportbeach.com Newport Beach Dentistry family dental practice in Newport Beach, CA (1401 Avocado Ave, Ste 209), founded 30+ years ago and currently run by brothers Dr. F. Frank Foroutan (USC DDS 1998) and Dr. F. Ryan Foroutan (USC DDS 1996) a practice that changed ownership from Dr. Rasch Kantor/Appelsies Foroutan over the decades. Services: implants, crowns, veneers, Invisalign, root canals, periodontics, extractions, sedation, whitening, emergency care (same-day); accepts Delta Dental Premier/PPO and most major insurance, CareCredit financing; $99 new-patient special (exam + X-rays + cleaning). Team ~10 (Nancy office manager, Monica front desk, Erica hygienist); languages: English, Farsi, Spanish. Related entities: Foroutan Dental Inc. (Buena Park), OC Elite Dental (Buena Park + Anaheim Hills); also connected to F. Foroutan DDS Inc. (Corona). No revenue disclosed (private practice, est. $25M/yr for 3 doctors in this location).
Saga University
October 14, 2026
•[ ransomware, education, healthcare ]
Saga University was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Education. Country: Japan. Website: saga-u.ac.jp. saga-u.ac.jp Saga University is a national Japanese university in Saga Prefecture, Kyushu founded in 1949 (roots back to 1875), merged with Saga Medical School in 2003, operating as a national university corporation since 2004. Scale: ~6,600 students, ~3,300 staff, 6 faculties (including medicine with a ~600-bed hospital) across Honjo, Nabeshima, and Arita campuses. Annual revenue 44B ($300M), ~57% of it generated by the university hospital; state capital 47.3B, with a +1.6B surplus in FY2024. Signature strength: the Institute of Ocean Energy (IOES) a world leader in OTEC (ocean thermal energy), pursuing the world's first 1-MW commercial plant ~2026-27 with Mitsui O.S.K. Lines. Rector since Oct 2025: Koichi Node (cardiologist); 2026 launches include Japan's first national-university cosmetic science program (30 students, 7x oversubscribed) and a joint teacher-training degree with Kumamoto University. Weak points: rankings have slid for a decade (QS Asia 801-850, THE 1501+)
EnVision Eye Care
October 16, 2026
•[ ransomware, leak, healthcare ]
EnVision Eye Care was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-16. Sector: Healthcare. Healthcare - Ophthalmology (US) Mississippi, USA | Patient records of a Mississippi ophthalmology practice: 13,308 patient records with names and dates of birth, taken from the patient database backup of December 2025; The complete patient database backup history of the practice, 2018 through 2025; Patient eye examination records with full ocular, medical and social history; The OCT eye scan archive of the practice | [NOT PAID EXPOSED]
Company #78
October 16, 2026
•[ ransomware, healthcare ]
Company #78 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-16. Healthcare - Ambulatory Surgery Center (US) Texas, US | [PENDING EXPOSURE]
PART2 Global AirFreight International
October 17, 2026
•[ ransomware, leak, technology ]
PART2 Global AirFreight International was listed as a victim on the leak site of the Eclipse ransomware group; the attack is estimated to have taken place on 2026-10-17. Sector: Transportation. Country: Singapore. Website: www.globalair.com.sg. PART 2 Global Airfreight International is a logistics solution provider specializing in air freight, ocean freight, cross-border trucking, and contract logistics. They cater to various industries including aerospace, healthcare, technology, and general cargo, offering services such as temperature-controlled solutions and project cargo management. The company focuses on delivering high standards of service and innovative solutions to meet customer requirements. Their clients include businesses in need of reliable and efficient supply chain solutions for critical shipments.