Porter Wright
April 28, 2026
•[ ransomware, leak ]
Porter Wright was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-04-28. Sector: Professional Services. Country: United States of America. Website: porterwright.com. Founded in 1846, Porter Wright is a full-service law firm offering legal helo for the community specia
NTN Bearing Corporation of America
April 24, 2026
•[ ransomware, manufacturing, leak ]
NTN Bearing Corporation of America was listed as a victim on the leak site of the payoutsking ransomware group; the attack is estimated to have taken place on 2026-04-24. Sector: Manufacturing. Country: United States of America. Website: ntnamericas.com. [AI generated] NTN Bearing Corporation of America is a US-based subsidiary of Japan's NTN Corporation, operating in the industrial manufacturing sector. The company produces and distributes precision bearings, driveshafts, and related mechanical components used in automotive, aerospace, and industrial machinery applications. Headquartered in Mount Prospect, Illinois, it serves customers across North America with engineering support and distribution services.
Inteceng.com.my (+ Tsksynergy.com.my + Amemanufacturing.com.my + Woodnova.com.my)
May 13, 2026
•[ ransomware, leak, manufacturing ]
Inteceng.com.my (+ Tsksynergy.com.my + Amemanufacturing.com.my + Woodnova.com.my) was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-05-13. Sector: Manufacturing. Country: Malaysia. Website: Inteceng.com.my. These websites represent a synergistic group of Malaysian companies, such as AME Elite and TSK Synergy, specializing in integrated industrial construction and engineering solutions. They provide end-to-end services, including the design and fabrication of steel structures, mechanical engineering, and the development of large-scale industrial parks. Together, they leverage their combined expertise to deliver "turnkey" manufacturing facilities and infrastructure projects across the region.
Institute of Private Enterprise Development
April 24, 2026
•[ ransomware, finance, leak ]
Institute of Private Enterprise Development was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-04-24. Sector: Professional Services. Country: United States of America. Website: ipedgy.com. The Institute of Private Enterprise Development focuses on improving the livelihoods of micro a
nd small entrepreneurs by offering loans ranging from $40,000 to $7,500,000 GYD. Their services
are designed to support individuals looking to start or grow their businesses, with a signific
ant emphasis on female and youth entrepreneurs, as well as those in rural areas.
We will upload 55gb of corporate data soon. Detailed clients and employee personal information
(passports, DLs, SSNs, ID cards, financial information, credit card details and so on), NDAs ,
etc.
Allele Diagnostics
May 6, 2026
•[ ransomware, healthcare, leak ]
Allele Diagnostics was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-05-06. Sector: Healthcare. Country: France. Website: allelediagnostics.com. Allele Diagnostics specializes in providing exceptional microarray and cytogenetic testing serv
ices, including neonatal, pediatric, and prenatal testing. The company is dedicated to deliveri
ng accurate, fast, and reliable results, leveraging the extensive experience of its laboratory
staff to optimize testing performance.
We will upload corporate data soon. Detailed employee personal information (passports, DLs, SSN
s, I9 forms, credit card details and so on), patients information (personal docs and medical in
formation), contracts and agreements, etc.
John G Yphantides A Professional Law
May 13, 2026
•[ ransomware, leak ]
John G Yphantides A Professional Law was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-13. Sector: Professional Services. Country: United States of America.
Johnson Carter Architects
May 13, 2026
•[ ransomware, leak, technology ]
Johnson Carter Architects was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-13. Sector: Professional Services. Country: United States of America.
LTJ Industrial Services
May 13, 2026
•[ ransomware, leak, technology ]
LTJ Industrial Services was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-13. Sector: Professional Services. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.ltjindustrial.com.
Mayer
May 13, 2026
•[ ransomware, leak ]
Mayer was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-13. Sector: Professional Services. Country: United States of America. Website: www.mayerllp.com.
vspsolutions.com.au SAMPLE-FREE 20GB
May 13, 2026
•[ ransomware, leak, financial ]
vspsolutions.com.au SAMPLE-FREE 20GB was listed as a victim on the leak site of the stormous ransomware group; the attack is estimated to have taken place on 2026-05-13. Sector: Professional Services. Country: Australia. Website: vspsolutions.com.au. +40G Full Financial Backups (Quickbooks & Reckon)-Email Archives & Staff Personal Folders-Customer/Client Databases (Installers & Integrators nationwide)-Shipment & Order Tracking for major brands like Hikvision & Axis.
dsdlawfirm.com
May 14, 2026
•[ ransomware, leak ]
dsdlawfirm.com was listed as a victim on the leak site of the killsec ransomware group; the attack is estimated to have taken place on 2026-05-14. Sector: Professional Services. Country: United States of America. Website: dsdlawfirm.com. Price ??? Disclosures 0/1
University Of Georgia
May 14, 2026
•[ ransomware, education, government ]
University Of Georgia was listed as a victim on the leak site of the ShadowByt3$ ransomware group; the attack is estimated to have taken place on 2026-05-14. Sector: Education. Country: United States of America. Website: uga.edu. ShadowByt3$ has breached University of Georgia. The full data is on are leak site. We stole approximately 3.2 MB in raw text files. No customers were affected just exployees the following was stolen. - Physical Locations: Home addresses (like the Columbus, GA residential home) and specific office numbers (like Office 2207). - Private Contact Info: Personal cell phone numbers and home phone numbers (e.g., the 404-736-xxxx). - Employee Information: This often includes full names, contact details, and institutional identification photos. - Project Documentation: Information regarding internal university projects, including tracking logs and administrative data for various departments. - Workforce Data: Internal metadata such as position numbers, departmental assignments, and work schedules. - Technical Details: Notes regarding system maintenance and development that could potentially highlight internal processes - Critical Infrastructure: Active project maps for GEMA (Emergency Management), Georgia Broadband, and GDOT (Transportation) through 2026. - Government Records: Access to Asset Forfeiture logs and County-level GIS (Athens-Clarke, Bibb) that underpins 911 dispatch and land taxes. - Leadership Secrets: The UGA Office of the President Mail Tracker and Gov360 anonymous executive coaching logs. - The "SME" Map: we have identified the "Subject Matter Experts" like Noah Abouhamdan, Chad Rupert, and Pat Russell. we know exactly how many hundreds of hours these people have spent on specific pieces of code. - Security Clearances: we know who is a "Benefited" full-time employee (high-value target) versus a "Student Assistant" (low-value entry point).
lafj.org
May 15, 2026
•[ ransomware, leak ]
lafj.org was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-05-15. Sector: Professional Services. Country: United States of America. Website: lafj.org. Louisiana Association for Justice is a voluntary bar association whose statewide membership is composed mostly of lawyers who have a trial practice. Both defense and plaintiff attorneys belong to the association; however, most LAJ members represent consumer plaintiffs in civil actions. LAJ attorney-members are small business owners, maintaining a practice and supporting an office staff of fewer than 20 people.Customer data, contracts, payment documents, internal company documentation.
wwag.org
May 15, 2026
•[ ransomware, leak ]
wwag.org was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-05-15. Sector: Other. Country: Austria. Website: wwag.org. An organization known as Wa Wai Assembly of God Church, an entity located in Hong Kong and operating under a na...
Menzies Group
May 15, 2026
•[ ransomware, leak ]
Menzies Group was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-15. Sector: Transportation. Country: Australia. Website: www.menziesgroup.com.au.
AdvancedHEALTH
May 14, 2026
•[ ransomware, healthcare, leak ]
AdvancedHEALTH was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-05-14. Sector: Healthcare. Country: United States of America. Website: ouradvancedhealth.com. The leak contains 2,300,000 Lines of FULL patient data, partner agreements, management, payroll and HR files.
Screenshot attached :)
We Will Leak 1,000 Lines of patient data a day, until we've been paid or the timer hits 0. Check this description for Fresh leaks everyday.
Day 1 : https://temp.sh/aLnBB/ADI-Day1.zip
Day 2 : Expect it around 5PM UTC
Transitions Pro Centre Val de Loire
May 3, 2026
•[ ransomware, leak, technology ]
Transitions Pro Centre Val de Loire was listed as a victim on the leak site of the PrinzEugen ransomware group; the attack is estimated to have taken place on 2026-05-03. Sector: Professional Services. Country: France. Website: transitionspro-cvl.fr. The swift attack has resulted in both the exfiltration and encryption of hundreds of gigabytes.
In the event of complete non-compliance; Files will be fully released for public download.
URG OEM
May 17, 2026
•[ ransomware, manufacturing, leak ]
URG OEM was listed as a victim on the leak site of the nova ransomware group; the attack is estimated to have taken place on 2026-05-17. Sector: Manufacturing. Country: South Korea. Website: urg.co.kr. urg.co.kr - URG was founded with a sincere desire to provide solutions for customers facing skin concerns.
Starting in 1990 with the launch of Shangpree Spa, the company not only delivered high-quality products to customers but also set a new standard for luxury service in the skincare industryestablishing itself as a leading premium spa brand.
Building on over 30 years of tradition and expertise, URG has since launched a variety of skincare brands, gaining recognition both domestically and internationally.
Fruits Queralt
May 17, 2026
•[ ransomware, leak ]
Fruits Queralt was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-17. Sector: Agriculture and Food Production. Country: Spain. Website: www.fqueralt.com.
wtitransport.com
May 17, 2026
•[ ransomware, leak, technology ]
wtitransport.com was listed as a victim on the leak site of the chaos ransomware group; the attack is estimated to have taken place on 2026-05-17. Sector: Transportation. Country: Germany. Website: www.wtitransport.com. Company management has exactly 72 hours to contact us. Otherwise, the organizations datawhich contains confidential informationwill be published on our public platform, and the possibility of further negotiations will be ruled out.
WTI Transport is a flatbed trucking company headquartered
