Cole Manufacturing
June 15, 2026
•[ ransomware, manufacturing, leak ]
Cole Manufacturing was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-06-15. Sector: Manufacturing. Country: United States of America. Website: colemfg.com. ***.com zoominfo.com/c/cole-manufacturing-corp/344188464 Cole Manufacturing is a specialized metal fabrication and custom tooling company based in West Bend, Wisconsin, dedicated to delivering high-quality, cost-effective solutions for the metal forming industry.They offer a comprehensive range of services, including precision tool and die making, metal stamping, prototyping, and both manual and robotic welding.With versatile capabilities and advanced equipment, the company expertly handles projects of any size, providing reliable manufacturing support from custom fixtures to high-volume production runs
Executive Coach
June 15, 2026
•[ ransomware, leak ]
Executive Coach was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-06-15. Sector: Professional Services. Country: United States of America. Website: executivecoach.net. ***.net zoominfo.com/c/executive-coach-inc/32002101 Executive Coach Inc. is a premier group transportation and luxury motorcoach charter company based in Lancaster, Pennsylvania, proudly serving clients since 1979. Despite its corporate-sounding name, the company does not offer leadership training; instead, it specializes in comfortable charter bus rentals, airport transfers, and customized group tours. They provide reliable, high-end travel solutions across Pennsylvania, Maryland, and beyond, seamlessly accommodating groups of all sizes with a modern and well-maintained fleet
Centre Medical Crowley
June 15, 2026
•[ ransomware, healthcare, leak ]
Centre Medical Crowley was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-06-15. Sector: Healthcare. Country: Canada. Website: crowleymd.ca. ***.ca zoominfo.com/c/centre-medical-crowley/1340359581 Crowley Medical Centre is a premier healthcare facility in Montreal, located just steps away from the McGill University Health Centre (MUHC). They provide comprehensive, specialized medical care across diverse fields, including family medicine, obstetrics, ophthalmology, and rheumatology, alongside advanced medical aesthetics. Their core mission is to deliver exceptional, patient-centered treatments using state-of-the-art technology within a welcoming and highly professional environment
Deep Well Services
June 15, 2026
•[ ransomware, leak, energy ]
Deep Well Services was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-06-15. Sector: Energy & Utilities. Over 7k records containing customer PII and other internal corporate data was compromised. This is a final warning to reach out by 18 June 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 16 June 2026 | Warning: FINAL WARNING PAY OR LEAK
glendale.edu
June 15, 2026
•[ ransomware, education, leak ]
glendale.edu was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-06-15. Sector: Education. Country: United States of America. Website: glendale.edu. Over 62 gigabytes of Glendale Community College data (304,000+ files) was compromised across PeopleSoft Campus Solutions (GCC, integrations, financial aid, and admission processing), including 150,000+ student records with names, dates of birth, and @student.glendale.edu emails, login and enrollment mapping files, new student enrollment CSVs, immunization compliance logs, admission checklist reports, financial aid batch exports, and transcript PDFs spanning September 2020 through June 2026. This is a final warning to reach out by 18 June 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 16 June 2026 | Warning: FINAL WARNING PAY OR LEAK
Ralph Lauren
June 16, 2026
•[ ransomware, leak, retail ]
Ralph Lauren was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-06-16. Sector: Retail & E-Commerce. Country: United States of America. Website: ralphlauren.com. Over 220GB of data containing customer PII, purchase/trasnaction info, future unreleased releases from 2027 and onward, and more was compromised. The Company failed to reach an agreement with us despite our incredible patience, all the chances and offers we made. They don't care. | Size: 163GB+ (compressed) | Updated: 16 June 2026 | SHA256: 17a7af9c00ea38ce822e2f022c0ceb5149535610a15f009b866d616e70cbf7e2
Diamond Truck Centres
June 16, 2026
•[ ransomware, leak, manufacturing ]
Diamond Truck Centres was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-06-16. Sector: Transportation. Country: Canada. [dealership, trucks] *** Western Canada's largest International Trucks dealership group (9 dealer + 13 sub-dealer locations, ~$63M revenue, 250 employees).
The dataset spans 17 years of unbroken operational history (20092026) and represents the full shared-drive contents of the entire company: HR, payroll, accounting, military contracts, and individual employee profiles.
The exposed material includes:
53 customer Pre-Authorized Debit (PAD) forms full bank account numbers, transit numbers, institution numbers, and authorized signatures for commercial customers including the City of Saskatoon.
17 years of employee payroll data wages, SINs (implied), pension contributions, benefits, termination calculations for every employee since 2009.
Biometric data ADP fingerprint timeclock enrollment records for all locations.
Immigration documents for 6+ foreign workers LMIA applications, offers of employment, provincial nominee support docs.
System credentials in plaintext ADP timeclock passwords, manager training logins, safe combination.
Military contract documentation Diamond's Controlled Goods Security Plan (ITAR/CGP), MSVS delivery matrices, military vehicle VINs, CFB Edmonton and RCMP vehicle program data.
289 GB of daily bank deposit scans (20172026) customer cheque images with names, amounts, and account details.
A complete Outlook PST archive (166 MB) years of internal email likely containing credentials and customer data.
jasperplastics.info
June 16, 2026
•[ ransomware, manufacturing, leak ]
jasperplastics.info was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-06-16. Sector: Manufacturing. Country: United States of America. Website: jasperplastics.info. Jasper Plastics Solutions specializes in providing turn-key plastic and polyurethane solutions primarily for OEM manufacturers in the RV, Marine, Automotive, and Construction industries. Their product offerings include polyurethane thermal column blocks, fiberglass components, and innovative design boards that are weather-resistant and customizable. With nearly 20 years of experience, they utilize advanced manufacturing techniques, including a new HD Digital Division for large format printing, to create high-quality parts that mimic natural materials. Jasper Plastics is committed to delivering practical and innovative solutions tailored to the specific needs of their clients.
Employees: 10
Revenue: $5 Million
Industry: Manufacturing
Phone Number: (574) 457-2062
Greg Crosslin
June 17, 2026
•[ ransomware, leak ]
Greg Crosslin was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-06-17. Sector: Professional Services. Country: United States of America. Website: www.destinlegal.com. United States
The Associated Builders and Contractors of Indiana/Kentucky
June 16, 2026
•[ ransomware, leak ]
The Associated Builders and Contractors of Indiana/Kentucky was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-06-16. Sector: Professional Services. Country: United States of America. Website: abcindianakentucky.org. A trade association
neuwoges.de
June 17, 2026
•[ ransomware, leak ]
neuwoges.de was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-06-17. Sector: Other. Country: Germany. Website: neuwoges.de. The Neubrandenburger Wohnungsgesellschaft mbH (NEUWOGES), a municipal housing company and subsidiary of the Vier-Tore-Stadt Neubrandenburg in Mecklenburg-Western Pomerania, Germany. It is one of the largest regional housing providers, managing around 12,000 apartments alongside commercial units and care facilities.
Its no secret that the company was subjected to a cyberattack and that data was stolen. But lets pull back the curtain a bit. At first, the companys leadership cut costs on proper IT infrastructure, and after the attack they continued to do sothis time at the expense of the security of their clients, employees, vendors, etc. Relying on the supervisory board, they attempted to obtain more information about the compromised data in order to protect themselves. Now youre learning about this for free. Stay tuned.
NAIC.org
June 18, 2026
•[ ransomware, finance, leak ]
NAIC.org was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-06-18. Sector: Professional Services. Country: United States of America. Website: NAIC.org. Over 3.1 terabytes of National Association of Insurance Commissioners data (105,000+ files) was compromised across the INSData statistical platform, Vision credit rating feeds, SERFF, OPTINS, UCAA, EDP, RDC, and state insurance department reporting systems (NAIC, all fifty state insurance departments, and thousands of licensed insurers), including 2.1 million insurer regulatory filing PDFs, 40,000 quarterly statistical CSVs with federal EINs and company data, 45,000+ licensed rating agency files from Moody's, Fitch, S&P, Kroll, DBRS, and AM Best with CUSIP and ISIN identifiers, statutory annual and quarterly financial statements, premium and loss statistics, and HR Ratings master data. This is a final warning to reach out by 22 June 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 18 June 2026 | Warning: FINAL WARNING PAY OR LEAK
www.eastersealsia.org
June 18, 2026
•[ ransomware, healthcare, leak ]
www.eastersealsia.org was listed as a victim on the leak site of the lynx ransomware group; the attack is estimated to have taken place on 2026-06-18. Sector: Healthcare. Country: United States of America. Website: www.eastersealsia.org. Easterseals Iowa provides an Assistive Technology Program that supports Iowans of all ages with disabilities, including the aging population, in finding and utilizing assistive technology to enhance their daily lives. Their services include personalized consultations, a demonstration center, a lending library, and access to durable medical equipment. They also offer education and training opportunities, both in-person and online, to help individuals understand and obtain the necessary devices. The program aims to promote independence and improve the quality of life for individuals with disabilities across Iowa.
Berg Lilly
June 18, 2026
•[ ransomware, leak ]
Berg Lilly was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-06-18. Berg Lilly PC is a trusted law firm based in Bozeman, Montana, with over 60 years of experience
providing quality legal representation to both local and national clients. The firm specialize
s in various areas of law, including business entity law, civil litigation, commercial transact
ions, construction law, employment law, estate planning, personal injury, and real estate law.
We will upload 50gb of corporate data soon. Clients personal information (passports, SSNs, DLs,
addresses, phones, confidential files, medical information, financials and so on), court heari
ngs, police reports and other legal documents.
icsecurity.com
June 18, 2026
•[ ransomware, technology, leak ]
icsecurity.com was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-06-18. Sector: Technology. Country: United States of America. Website: icsecurity.com. Over 2.7 million records and other internal corporate data was compromised. This is a final warning to reach out by 22 June 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 19 June 2026 | Warning: FINAL WARNING PAY OR LEAK
ra-vogeler.de
June 18, 2026
•[ ransomware, leak ]
ra-vogeler.de was listed as a victim on the leak site of the cloak ransomware group; the attack is estimated to have taken place on 2026-06-18. Sector: Professional Services. Country: Germany. Website: ra-vogeler.de. Country: germany | Size: 1.1TB | Private | Views: 1
Burris MacOmber
June 18, 2026
•[ ransomware, leak ]
Burris MacOmber was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-06-18. Sector: Professional Services. Country: United States of America. Website: burrismacomber.com. ***.com zoominfo.com/c/burris--macomber-pllc/368834075 Burris & MacOmber, PLLC is a reputable law firm based in Tucson, Arizona, recognized for its commitment to excellence and integrity in legal practice. The firm provides a comprehensive range of services, including civil litigation, international business law, real estate transactions, and estate planning. Backed by a team of experienced attorneys and knowledgeable support staff, they deliver tailored legal solutions to effectively meet their clients' diverse needs
ag-360.ca
May 15, 2026
•[ ransomware, leak ]
ag-360.ca was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-05-15. Sector: Agriculture and Food Production. Country: Canada. Website: ag-360.ca. With customer experience at the heart of our values, AG360, land surveyors, relies on the collaborat...
Nhà Thành Phố
June 21, 2026
•[ ransomware, leak, technology ]
Nh Thnh Ph was listed as a victim on the leak site of the nova ransomware group; the attack is estimated to have taken place on 2026-06-21. Sector: Other. Country: Vietnam. nhathanhpho.com.vn is an Vietnamese real estate listing platform operated by an individual, on Vinh, which allowed users to buy, sell, and rent properties - Nova Provide tree and samples from stolen data to the company with decrypt 1 file as sample when its get in touch with support department.
Lockers IT
June 21, 2026
•[ ransomware, technology, leak ]
Lockers IT was listed as a victim on the leak site of the nova ransomware group; the attack is estimated to have taken place on 2026-06-21. Sector: Technology. LockersIT is a self-owned Bangladeshi IT company founded in 2013, headquartered in Chandpur, that specializes in custom software development with a team of 11-50 employees - allcashdealer.com dealmart24.com dev1.lockersit.com erp.lockersit.com sales.lockersit.com brm.lockersit.com debnathashu.com dev2.lockersit.com eshop.lockersit.com cloud.debnathashu.com dev.allcashdealer.com dev3.lockersit.com lockersit.com cloud.lockersit.com dev.lockersit.com emailer.debnathashu.com project.debnathashu.com effected with the encryption, Data From the server has been taken, Nova Provide tree and samples from stolen data to the company with decrypt 1 file as sample when its get in touch with support department.
