Ciarus
April 8, 2026
•[ ransomware, technology, leak ]
Ciarus was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-04-08. Sector: Technology. Country: Germany. Website: ciarus.de. ciarus.de zoominfo.com/c/ciarus/1324145982 Ciarus Technologies is a software development company based in Germany that specializes in custom software development, web and mobile app development, IT outsourcing, and DevOps services. They cater to businesses looking for tailored IT solutions to enhance their competitiveness in the digital landscape. With a focus on exceptional customer service and technical expertise, Ciarus aims to help clients bring their ideas to life through reliable and cost-effective technology
Thai Rung Union Car
April 8, 2026
•[ ransomware, automotive, leak ]
Thai Rung Union Car was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-04-08. Sector: Transportation. Country: Thailand. Website: thairung.co.th. thairung.co.th zoominfo.com/c/thai-rung-union-car-public-company-ltd/104628554 Thai Rung Union Car Public Company Limited focuses on providing high-quality automotive solutions tailored for the Thai market. The company emphasizes constant innovation and sustainable development in its operations. It aims to build a better community through its products and services. Their target clients include individuals and businesses seeking reliable and innovative automotive options
irmler.org
March 5, 2026
•[ ransomware, leak, technology ]
irmler.org was listed as a victim on the leak site of the beast ransomware group; the attack is estimated to have taken place on 2026-03-05. Sector: Professional Services. Country: Germany. Website: www.irmler.org. Data size claimed by the group: 95GB. irmler.rechtsanwalte specializes exclusively in architectural law, public procurement law and private and public construction law. We are represented in Mecklenburg-Vorpommern and in Schleswig-Holstein at the locations in Schwerin and Lubeck. In the support of procurement procedures, in particular for the award of architect/planning services and architectural competitions, irmler.rechtsanwalte is active nationwide.
KEB
April 8, 2026
•[ ransomware, finance, leak ]
KEB was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-08. Sector: Financial Services. Country: Germany. Website: keb-automation.com. [AI generated] KEB, or Korea Exchange Bank, is a South Korean financial institution offering a wide range of banking and financial services including retail banking, corporate banking, foreign exchange, and trade finance. Headquartered in Seoul, South Korea, it has historically been one of the country's leading banks specializing in international transactions. KEB merged with Hana Bank in 2015 to form KEB Hana Bank, operating under Hana Financial Group.
Scholle IPN
April 8, 2026
•[ ransomware, manufacturing, leak ]
Scholle IPN was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-08. Sector: Agriculture and Food Production. Country: United States of America. Website: scholleipn.com. [AI generated] Scholle IPN is a global packaging company headquartered in the United States. It specializes in flexible packaging solutions, including bag-in-box systems, spouted pouches, and aseptic packaging primarily for food, beverage, and industrial liquid markets. The company serves customers across multiple industries worldwide and operates manufacturing facilities in North America, Europe, Asia, and beyond.
Sehlmann Fensterbau
November 22, 2025
•[ ransomware, manufacturing, leak ]
Sehlmann Fensterbau was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-11-22. Sector: Manufacturing. Country: Germany. Website: sehlmann.de. Sehlmann Fensterbau GmbH specializes in wooden and wood-metal win
dows in the Hamburg metropolitan area. They offer optimal window
solutions for innovative new constructions and stylish renovation
s, providing services from consultation and planning to productio
n and installation.
We will upload 44gb of corporate data soon. Employee personal fil
es (passports, DLs, EU IDs and other files), financials, lots of
project files, etc.
oncologica
April 9, 2026
•[ ransomware, healthcare, leak ]
oncologica was listed as a victim on the leak site of the TiMc ransomware group; the attack is estimated to have taken place on 2026-04-09. Sector: Healthcare. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.oncologica.com. We breached into their intranet and have total control of it , with 1TB+ data exfiltrated including covid-19 database and SaaS src code like oncomine KB and Other PII
Full data breach after the DDL
Siegel Lewitter Malkani
April 6, 2026
•[ ransomware, leak ]
Siegel Lewitter Malkani was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-04-06. Sector: Professional Services. Country: United States of America. Website: sl-employmentlaw.com. A highly respected law firm in the San Francisco Bay Area, specializing in employment law
Cox, Castle & Nicholson LLP
April 9, 2026
•[ ransomware, leak ]
Cox, Castle & Nicholson LLP was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-04-09. Sector: Professional Services. Country: United States of America. Website: coxcastle.com. Cox, Castle & Nicholson is a leading law firm specializing in real estate and related services, with o
Turbo International
May 13, 2025
•[ ransomware, manufacturing, leak ]
Turbo International was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-05-13. Sector: Transportation. Country: United States of America. Website: turbointernational.com. Turbo International was founded in 1989 as one of the first manuf
acturers of turbocharger component parts in North America. Origin
ally focused on producing compressor wheels and balancing service
s for local rebuilders, the company quickly expanded its product
line to include all major turbocharger components and service kit
s.
We will upload 48gb of corporate data soon. Employee personal doc
uments (passports, DLs, 29 forms, addresses, phones, emails and o
ther information), client information, financials, contracts and
agreements, corporate confidential documents, NDAs and so on.
T..t Ste..ius & Ho..ter LLP
April 10, 2026
•[ ransomware, leak ]
T..t Ste..ius & Ho..ter LLP was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-04-10. Sector: Professional Services. Country: United States of America.
wright-ryan.com
April 10, 2026
•[ ransomware, leak ]
wright-ryan.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-04-10. Sector: Professional Services. Country: United States of America. Website: wright-ryan.com. 600gb project nda personal client contract all corp data
Autogalerie Heister
April 10, 2026
•[ ransomware, leak, retail ]
Autogalerie Heister was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-04-10. Sector: Retail & E-Commerce. Country: Germany. Website: www.heistergruppe.de.
McGraw Hill, Inc. (mheducation.com)
April 11, 2026
•[ ransomware, leak, education ]
McGraw Hill, Inc. (mheducation.com) was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-04-11. Sector: Education. Country: United States of America. Website: mheducation.com. Over 45M Salesforce records containing PII data have been compromised. Pay or leak. This is a final warning to reach out by 14 Apr 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 11 Apr 2026 | Warning: FINAL WARNING PAY OR LEAK
Ryan, LLC.
April 11, 2026
•[ ransomware, technology, leak ]
Ryan, LLC. was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-04-11. Sector: Professional Services. Over 4.8M Salesforce records containing PII and other internal corporate data have been compromised. Pay or leak. This is a final warning to reach out by 14 Apr 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 11 Apr 2026 | Warning: FINAL WARNING PAY OR LEAK
Marcus & Millichap, Inc.
April 11, 2026
•[ ransomware, finance, technology ]
Marcus & Millichap, Inc. was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-04-11. Sector: Financial Services. Country: United States of America. Over 30M Salesforce records containing PII and other internal corporate data have been compromised. Pay or leak. This is a final warning to reach out by 14 Apr 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 11 Apr 2026 | Warning: FINAL WARNING PAY OR LEAK
Straten & Kollegen
April 12, 2026
•[ ransomware, finance, leak ]
Straten & Kollegen was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-04-12. Sector: Professional Services. Country: Germany. Website: stratenundkollegen.de. Straten & Kollegen GmbH is a tax consulting firm based in Nordhorn, serving clients in the Grafschaft Bentheim, Emsland, and surrounding areas. They provide personalized and competent tax advisory services to both businesses and private individuals, including specialized support for Dutch companies entering the German market. The firm also offers expertise in agricultural bookkeeping and assists registered associations with their tax-related challenges. Their goal is to alleviate the burden of tax processes, allowing clients to focus on their core competencies.
Affordable Oil
April 12, 2026
•[ ransomware, energy, leak ]
Affordable Oil was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-04-12. Sector: Energy & Utilities. Country: United States of America. Website: affordableoil.com. The goal of Affordable Oil is in our name. We strive to provide the best heating oil delivery service at the lowest cost. Our friendly office staff is here Monday - Friday to help you with all your scheduling needs. We have our own on-site oil storage facility. This ensures that we can serve all our customers without interruption all year round. 24 hour emergency burner service is available through reliable independent contractors.
T..t Ste..ius & Ho.i.ter LLP
April 13, 2026
•[ ransomware, leak ]
T..t Ste..ius & Ho.i.ter LLP was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-04-13. Sector: Professional Services. Country: United States of America.
Frutcola Olmué
April 13, 2026
•[ ransomware, leak, manufacturing ]
Frutcola Olmu was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-04-13. Sector: Agriculture and Food Production. Country: Chile. Website: www.olmue.com.