NationsBuilders Insurance Services
June 22, 2026
•[ ransomware, finance, leak ]
NationsBuilders Insurance Services was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Financial Services. [insurance] *** (NBIS) is the premier US underwriter of crane & rigging, concrete-pumping, heavy-haul, and residential-builder insurance a specialty managing general underwriter founded in Atlanta in 2001, acquired by Align Financial / DUAL North America (Howden Group) in August 2021. 2,748,845 filetree entries across 24 shares (AIM, IMAGERIGHT, the claims and policy-admin stores, HR, finance, IT, and a decade of M&A diligence rooms).
NTP B.V. Civil Engineering Construction
June 22, 2026
•[ ransomware, manufacturing, leak ]
NTP B.V. Civil Engineering Construction was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Manufacturing. Country: Netherlands. [engineering] NTP B.V. (trading as NTP Infra / NTP Groep) is a Dutch civil engineering contractor headquartered in Hattem, Gelderland. They build roads, lay cables, install sewers, and perform ground works across the Netherlands. With 150200 employees, offices in Hattem, Enschede, and Zevenaar, and a 2024/2025 acquisition of Aannemingsbedrijf Dubbink B.V., they are a typical mid-market Dutch aannemingsbedrijf government contracts, municipal works, private developments.
Their file server contained everything: 10+ years of operations, every employee's personal files, the complete HR/payroll system exports, every network device configuration, every project bid, and every financial record.
bits-pilani.ac.in
June 20, 2026
•[ ransomware, education, leak ]
bits-pilani.ac.in was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-06-20. Sector: Education. Country: India. Website: bits-pilani.ac.in. BITS Pilani is a premier Indian private research university and "Institution of Eminence" known for elite engineering and science programs across five campuses. Founded in 1964, it is highly selective with a 1.47% acceptance rate and offers a 0% attendance policy with mandatory industry immersion.
Ntd Apparel
June 22, 2026
•[ ransomware, retail, leak ]
Ntd Apparel was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Retail & E-Commerce. NTD Apparel specializes in creating high-quality apparel that connects with pop culture, offeri
ng a range of licensed products and in-house labels. They provide comprehensive services includ
ing market analysis, price point management, and visual merchandising to retailers.
We will upload 62gb of corporate data soon. Employee personal docs (passports, SSNs, DLs, medic
al information, phones, addresses and so on), projects, client information, confidential agreem
ents and so on.
HDS (Hdscorp)
June 22, 2026
•[ ransomware, leak, technology ]
HDS (Hdscorp) was listed as a victim on the leak site of the Icarus ransomware group; the attack is estimated to have taken place on 2026-06-22. Salesforce data for this corp.
Data stolen: SF data - compressed
FTL-Fast Transit Line
June 23, 2026
•[ ransomware, leak, manufacturing ]
FTL-Fast Transit Line was listed as a victim on the leak site of the nova ransomware group; the attack is estimated to have taken place on 2026-06-23. Sector: Transportation. Country: Belgium. Website: ftl.be. FTL International N.V. specializes in shipping, consolidation, forwarding, and groupage services, with a strong presence in major Northern European ports and an office in Colombo, Sri Lanka. With over 25 years of experience, they offer cost-effective port-to-port and door-to-door logistics solutions, including air freight and cargo insurance. Their services cater to a wide range of clients looking for reliable shipping options across the globe. FTL is committed to exceptional personalized attention and efficient shipment handling, embodying their motto 'Experience the Difference - Data included sales data, invoices and costumers full names and phones etc; Nova Provide tree and samples from stolen data to the company when its get in touch with support department.
viennaairport.com
June 23, 2026
•[ ransomware, leak ]
viennaairport.com was listed as a victim on the leak site of the apt73 ransomware group; the attack is estimated to have taken place on 2026-06-23. Sector: Transportation. Country: Austria. Website: viennaairport.com. Vienna Airport (Flughafen Wien AG) is an Austrian company, the operator of Vienna International A...
Miami Machine
June 24, 2026
•[ ransomware, manufacturing, leak ]
Miami Machine was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-06-24. Sector: Manufacturing. Country: United States of America. Miami Machine Inc. specializes in machining, fabrication, and engineering services tailored for
the paper, power, steel, and OEM markets. With over 50 years of experience and a manufacturing
space of 86,000 sq. ft, they provide high-quality, custom machinery and equipment solutions.
We will upload corporate data soon. Employee personal docs (passports and other docs, photos),
NDAs, projects, contracts and agreements, client information, etc.
Jit Ex
June 24, 2026
•[ ransomware, leak, manufacturing ]
Jit Ex was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-06-24. JIT-EX, LLC is a privately owned for-hire trucking fleet based in Memphis and Nashville, specia
lizing in regional and local truckload services, dedicated fleets, and crossdock solutions. The
company offers a variety of services including transloading, dock services, and storage traile
rs, aiming to be a one-stop solution for transportation needs.
We will upload 40gb of corporate data soon. Employee personal docs (passports, DL numbers of 31
7 persons, SSNs, w9s and so on), credit card details, payment details, lot of NDAs, projects, c
ontracts and agreements, customer information, etc.
montechiaro-store.com
June 24, 2026
•[ ransomware, leak, retail ]
montechiaro-store.com was listed as a victim on the leak site of the stormous ransomware group; the attack is estimated to have taken place on 2026-06-24. Sector: Retail & E-Commerce. Country: Italy. Website: montechiaro-store.com. Complete data belonging to customers and buyers has been accessed, along with designs, orders, and other assets. This includes all domains associated with the parent company: maglificioliliana.com/
maglificioliliana.com
June 24, 2026
•[ ransomware, leak, manufacturing ]
maglificioliliana.com was listed as a victim on the leak site of the stormous ransomware group; the attack is estimated to have taken place on 2026-06-24. Website: maglificioliliana.com. Over 400 GB of data has been accessed and exfiltrated. This includes product designs, historical fashion lines, and technical specifications for garments. Furthermore, we have obtained customer databases from various parts of the world, financial records, commercial contracts, employee data, personal files for all staff members within the network, daily operational documents, and more.
Delegal Poindexter & Underkofler, P.A.
June 25, 2026
•[ ransomware, leak ]
Delegal Poindexter & Underkofler, P.A. was listed as a victim on the leak site of the morpheus ransomware group; the attack is estimated to have taken place on 2026-06-25. Sector: Professional Services. Country: United States of America. Website: protectingcareers.com. **Website**: protectingcareers.com
**Revenue**: $5 Million
Delegal Poindexter & Underkofler provides highly specialized legal services to employees with employment law concerns.They represent profes
Clearview Eye Centre
June 25, 2026
•[ ransomware, healthcare, leak ]
Clearview Eye Centre was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-06-25. Sector: Healthcare. Country: Canada. Website: clearvieweyecentre.com. Clearview Eye Centre is a state-of-the-art ophthalmology clinic run by doctors Faisal Adatia and Ryan Yau in Calgary, Alberta. They disregard security regulations and medical confidentiality, show no respect for their clients' privacy, and make no attempt to protect the information stored in their databases. Their practices are extremely lax, resulting in client information including medical records, personal data, incident reports, and financial and tax information being exposed to you.
Nachlass Nord
June 25, 2026
•[ ransomware, leak, finance ]
Nachlass Nord was listed as a victim on the leak site of the anubis ransomware group; the attack is estimated to have taken place on 2026-06-25. Sector: Professional Services. Country: Germany. Website: nachlass-nord.de. Inheritance lawyers expose IDs, estate records, and client data.
Grupo Riquelme
June 13, 2026
•[ ransomware, leak, finance ]
Grupo Riquelme was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-06-13. Sector: Agriculture and Food Production. Country: Paraguay. Website: www.gruporiquelme.com. - Full Database Backup- Banking & Financial Data- Accounting & Ledger Records- Customer Databases- HR / Workforce Data- User, Role & Permission data- ERP & Critical Business Application Data
GSP Crop Science Pvt
June 25, 2026
•[ ransomware, manufacturing, leak ]
GSP Crop Science Pvt was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-06-25. Sector: Agriculture and Food Production. Country: India. Website: gspcrop.in. GSP Crop Science Limited is a leader in agricultural innovation, specializing in crop science and sustainable farming solutions. The company offers a wide range of products including pesticides, herbicides, fungicides, and plant growth regulators, designed to enhance crop productivity while minimizing environmental impact. Their target clients include farmers and agricultural businesses seeking effective and reliable crop protection solutions. With a strong commitment to research and development, GSP aims to revolutionize agriculture and support farmers in achieving high-quality, healthy crops.
Benchmark Industrial Supply
June 26, 2026
•[ ransomware, leak ]
Benchmark Industrial Supply was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-06-26. Sector: Professional Services. Country: United States of America. Website: www.benchmarkinc.com. United States
theswansonlawgroup.com
June 26, 2026
•[ ransomware, leak ]
theswansonlawgroup.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-06-26. Sector: Professional Services. Country: United States of America. Website: theswansonlawgroup.com. Meet Ben Swanson. The clients confidentiality worst nightmare.
Hologic
June 28, 2026
•[ ransomware, healthcare, leak ]
Hologic was listed as a victim on the leak site of the Redact ransomware group; the attack is estimated to have taken place on 2026-06-28. Sector: Healthcare. Country: United States of America. Website: hologic.com. Sector: Medical Supplies | Revenue: $4B USD
lifevantage.com
June 4, 2026
•[ ransomware, retail, leak ]
lifevantage.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-06-04. Sector: Retail & E-Commerce. Country: United States of America. Website: lifevantage.com. THE NEUTRALIZING FACTOR: How LifeVantage Corporation Profits from Hope and Buries the Truth PROLOGUE...
