Magnolia (Israel)
May 5, 2026
•[ ransomware, retail, leak ]
Magnolia (Israel) was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Retail & E-Commerce. Country: Israel. Website: magnolia-jewellery.com. Israeli jewelry company. Silver & accessories, participates in Vicenza jewelry fair (2025/2026). Sells via buyme.co.il gift cards. ~38k files, invoices in Hebrew (SI/IN/OV prefix).
Ropers Majeski
April 23, 2026
•[ ransomware, leak, finance ]
Ropers Majeski was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-04-23. Sector: Professional Services. Country: United States of America. Website: ropers.com. [AI generated] Ropers Majeski is a law firm based in the United States, operating primarily in California. The firm provides legal services across a range of practice areas including litigation, insurance defense, business law, employment law, and professional liability. It serves corporate clients, insurers, and individuals, with offices in multiple California cities. The firm is known for its work in complex civil litigation and risk management counsel.
The Modern Flour Mill
May 3, 2026
•[ ransomware, manufacturing, leak ]
The Modern Flour Mill was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-03. Sector: Agriculture and Food Production. Website: modernflourmills.com. modernflourmills.com zoominfo.com/c/the-modern-flour-mills-and-macaroni-factories-co/425333381 Modern Flour Mills & Macaroni Factories Co. (MFM) is a diversified cereal processor founded in 1949 and headquartered in Amman, Jordan, with a workforce of 201500 employees. The company operates four main production plants wheat flour milling, pasta, snack foods, and bakery ingredients and notably opened the first pasta factory in the entire Middle East in 1967. Its products are sold under well-known regional brands: Al-Ghazal (flour & pasta), Suprema/Barakeh (pasta), MFM (specialty flour & baking mixes), and Samar (snacks), with co-packing and private labeling available for export markets
Keretapi Tanah
May 3, 2026
•[ ransomware, leak ]
Keretapi Tanah was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-03. Sector: Transportation. Country: Malaysia. Website: ktmb.com.my. ktmb.com.my zoominfo.com/c/keretapi-tanah-melayu-berhad/21365008 KTMB (Keretapi Tanah Melayu Berhad) is Malaysia's largest and oldest railway company, with a rail network spanning 1,699 km across Peninsular Malaysia, extending into Singapore and Thailand. It operates multiple services including KTM Komuter (urban commuter trains since 1995), ETS electric intercity trains, and diesel-powered KTM Intercity trains. The company was privatized in 1992 and today offers online ticketing via its website and mobile app, with a QR-code boarding system
Magisterial Service
April 29, 2026
•[ ransomware, government, leak ]
Magisterial Service was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-04-29. Sector: Professional Services. Country: Papua New Guinea. Website: magisterialservices.gov.pg. magisterialservices.gov.pg The Magisterial Service of Papua New Guinea (MS) is the administrative arm of the country's District Court system, established in 1975 under Section 173(1) of the PNG Constitution. It oversees the effective and efficient administration of 63 District Court establishments and over 400 gazetted court-holding locations across the country. Headquartered in Port Moresby, the service is led by the Chief Magistrate and operates under the Ministry of Justice and Attorney General. Its budget for 2025 was projected at K109 million, reflecting the government's commitment to improving access to justice nationwide
Forsheda Stlverktyg
April 29, 2026
•[ ransomware, manufacturing, leak ]
Forsheda Stlverktyg was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-04-29. Sector: Manufacturing. Country: Sweden. Website: stalverktyg.com. stalverktyg.com zoominfo.com/c/forsheda-stlverktyg-ab/345814836 Forsheda Stalverktyg AB is a Swedish industrial company founded in 1961 by Sigfrid Johansson, based in Forsheda, Sweden. For over 60 years, it has developed, manufactured, and serviced high-quality injection molding tools for the plastics, rubber, and metal industries. The company manages the full tool lifecycle from product idea and manufacturing to repair and modification and is certified to ISO 9001:2015 and ISO 14001:2015. It employs 1150 people and collaborates with international suppliers in Asia
Beaconhouse School System
April 27, 2026
•[ ransomware, leak, education ]
Beaconhouse School System was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-04-27. Sector: Education. Country: Pakistan. Website: beaconhouse.net. beaconhouse.net zoominfo.com/c/beaconhouse-school-system/351460008 Beaconhouse was founded in November 1975 in Lahore, Pakistan, as the modest Les Anges Montessori Academy with just 19 toddlers. Today it has grown into a global network with over 380,000 students across 8 countries, including Pakistan, the UK, Malaysia, the Philippines, UAE, Oman, Belgium, and Thailand. The group employs more than 18,000 staff from around the world and encompasses everything from early childhood education to university-level institutions such as Beaconhouse National University and Concordia Colleges. In 1996, it became the first private school network in the world to receive financing from the World Bank's International Finance Corporation
Moorman Harting
April 15, 2026
•[ ransomware, leak, finance ]
Moorman Harting was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Professional Services. Country: United States of America. Website: moormanharting.com. Moorman, Harting & Company is a comprehensive wealthcare firm that provides a variety of soluti
ons for tax, accounting, and financial needs. Their services include accounting, payroll, tax p
reparation, retirement planning, and personalized financial coaching.
We will upload 21gb of corporate data soon. Employee personal information (passport numbers, Dl
s, SSNs and other sensitive information), client files, financials, contracts and agreements, i
nternal confidential files, NDAs and so on.
Inox Market Service SpA
May 6, 2026
•[ ransomware, manufacturing, leak ]
Inox Market Service SpA was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-06. Sector: Professional Services. Country: Italy. Website: www.inoxmarketservice.com.
ettp.be
May 6, 2026
•[ ransomware, technology, leak ]
ettp.be was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-05-06. Sector: Professional Services. Country: Belgium. Website: ettp.be. Appears to be a Belgian-based entity likely involved in professional training, technology consulting, or industrial services. While detailed public data
Sandberg Phoenix Information
April 29, 2026
•[ ransomware, leak, finance ]
Sandberg Phoenix Information was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-04-29. Sector: Professional Services. Country: United States of America. Website: sandbergphoenix.com. Over 45 years providing superior legal services to clients of every size throughout the Midwest and ac
Farella Braun + Martel LLP Information
May 6, 2026
•[ ransomware, leak, finance ]
Farella Braun + Martel LLP Information was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-05-06. Sector: Professional Services. Country: United States of America. Farella Braun + Martel LLP is a leading Northern California law firm representing corporate and privat
alge-stop.dk
May 6, 2026
•[ ransomware, retail, leak ]
alge-stop.dk was listed as a victim on the leak site of the m3rx ransomware group; the attack is estimated to have taken place on 2026-05-06. Sector: Retail & E-Commerce. Country: Denmark. Website: alge-stop.dk. +45 22100211 . Alge-Stop helps homeowners and businesses keep their outdoor surfaces clean and protected. They remove algae and moss from roofs, walls, tiles, and paving stones, making surfaces look fresh and new. With their special treatment and cleaning process, Alge-Stop offers up to 20 years of protection, helping customers maintain the beauty and integrity of their property Stolen: 73gb 7100 files
Elia Law Firm
April 14, 2026
•[ ransomware, leak, financial ]
Elia Law Firm was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-04-14. Sector: Professional Services. Country: United States of America. Website: elialaw.com. Elia Law Firm APC is a top San Diego law firm specializing in personal injury, civil litigation
, and business law. They are dedicated to fighting for their clients' rights and maximizing rec
overy for physical, mental, and financial losses.
We will upload 100gb of corporate data soon. Detailed employee personal information (passport,
DLs, SSN, death and birth certificates, financial information, payment details and so on), lots
of legal files (court hearings, police reports and so on), financials, etc.
rhactushotel.com
April 22, 2026
•[ ransomware, leak ]
rhactushotel.com was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-04-22. Sector: Hospitality. Country: Egypt. Website: rhactushotel.com. Rhactus Hotel is a premier accommodation provider located in El-Alamein, Egypt, offering a variety o...
rjrgleanergroup.com
May 7, 2026
•[ ransomware, leak, technology ]
rjrgleanergroup.com was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-05-07. Sector: Professional Services. Country: United States of America. Website: rjrgleanergroup.com. RJRGLEANER Communications Group is a leading media company based in Jamaica, with operations extendi...
PennEastern Architects
May 8, 2026
•[ ransomware, leak, manufacturing ]
PennEastern Architects was listed as a victim on the leak site of the cmdorganization ransomware group; the attack is estimated to have taken place on 2026-05-08. Sector: Professional Services. Country: United States of America. Website: www.penneastern.com. The principals of PennEastern Engineers, LLC are Paul Pasonick, Andrew Pasonick, Michael Amato and Daryl Pawlush. All principals have extensive experience in commercial and residential land developments, municipal projects, sanitary sewer projects, storm water projects, pavement projects, flood control projects and soil erosion and sedimentation control plans. In addition, each has assisted in design, specification writing, cost estimating, project bidding and bid review, construction observation and project management of the various projects. The Principals of PennEastern Architects, LLC are Andrew Pasonick, Emil Jarolen and Norman Manovsky. Design Principal Emil Jarolen has been practicing Architecture since 1974 and has been a Registered Architect in the State of Pennsylvania since 1978. In addition, Mr. Jarolen is Registered as an Architect in the States of Maryland, New York, New Jersey and the District of Columbia.
Shipping Services
May 8, 2026
•[ ransomware, leak ]
Shipping Services was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-08. Sector: Transportation. Country: Argentina. Website: www.ssa-shipping.com.ar.
Lindabury
May 9, 2026
•[ ransomware, leak, finance ]
Lindabury was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-09. Sector: Financial Services. Country: United States of America. Website: www.lindabury.com.
Prescott & Holden
May 8, 2026
•[ ransomware, leak ]
Prescott & Holden was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-05-08. Sector: Professional Services. Country: United States of America. Website: familylaw.com. A legal firm dedicated to safeguard the rights of its clients
