ANADOLUBANK
July 31, 2026
•[ ransomware, finance, leak ]
ANADOLUBANK was listed as a victim on the leak site of the CRPxO ransomware group; the attack is estimated to have taken place on 2026-07-31. Sector: Financial Services. Country: Turkey. Website: anadolubank.com.tr. Sector: Banking | Data leaked: 0.4 GB
Panorama BPO
May 30, 2026
•[ ransomware, leak, technology ]
Panorama BPO was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-05-30. Sector: Professional Services. Country: Philippines. Website: www.panoramabpo.com. Panorama BPO is a large international company specializing in business process outsourcing (BPO) and providing comprehensive operational services for businesses.
Taos Mountain Casino
May 30, 2026
•[ ransomware, leak ]
Taos Mountain Casino was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-05-30. Sector: Hospitality. Country: United States of America. Website: taosmountaincasino.com. Taos Mountain Casino is a Native American gaming casino located in Taos, New Mexico. It is owned and operated by the Taos Pueblo, a federally recognized tribe known for its ancient, historic adobe pueblo.
Mortensenlawoffices
July 28, 2025
•[ ransomware, leak ]
Mortensenlawoffices was listed as a victim on the leak site of the kairos ransomware group; the attack is estimated to have taken place on 2025-07-28. Sector: Professional Services. Country: United States of America. Mortensen Law Offices, PLLC
offers legal services, particularly bankruptcy, and provides consultations via Zoom, phone, or in-office for clients in the Phoenix/Mesa and Tucson areas, focusing on clear, empathetic guidance.
Wonjin Plastic Surgery
April 7, 2026
•[ ransomware, healthcare, leak ]
Wonjin Plastic Surgery was listed as a victim on the leak site of the Black X ransomware group; the attack is estimated to have taken place on 2026-04-07. Sector: Healthcare. Country: South Korea. Website: www.k-wonjin.co.kr. WJ Wonjin's medical staff work to achieve the optimal effect according to each individual patient's condition and desired result. Our medical services are provided by specialist doctors on-site, and our interpreting coordinators assist throughout the whole process. Safest Anesthesia System by Exclusive Anesthesiologists. We value our patients' safety during their surgery using cutting edge anesthesia system. Fully equipped with specialized medical facilities and system from the very beginning, we value safety for our patients.
IBENA Textilwerke
June 2, 2026
•[ ransomware, leak, manufacturing ]
IBENA Textilwerke was listed as a victim on the leak site of the nova ransomware group; the attack is estimated to have taken place on 2026-06-02. Sector: Manufacturing. Country: Germany. IBENA HEIMTEX is a family-owned textile manufacturer based in Bocholt, Germany, established in 1826. The company specializes in high-quality home textiles, including cuddly blankets, bed linen, and technical textiles for various industries. Their products cater to both consumers and businesses, with offerings such as fireproof fabrics, digital printing textiles, and car interior fabrics for renowned automotive brands. IBENA is committed to sustainability and quality, ensuring their textiles meet numerous quality standards - Nova Provide tree and samples from stolen data, free 2 files decrypt to the company when its get in touch with support department.
Cambridge Mobile TelematicsNEW
June 2, 2026
•[ ransomware, technology, leak ]
Cambridge Mobile TelematicsNEW was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-06-02. Sector: Technology. Country: United States of America. [AI generated] Cambridge Mobile Telematics (CMT) is a US-based technology company headquartered in Cambridge, Massachusetts. It operates in the telematics and insurtech industry, providing mobile sensing and data analytics solutions. CMT specializes in measuring driving behavior using smartphone sensors and AI to help insurers, fleets, and enterprises improve road safety and reduce risk through usage-based insurance and driver safety programs.
Stellar
May 31, 2026
•[ ransomware, technology, leak ]
Stellar was listed as a victim on the leak site of the spacebears ransomware group; the attack is estimated to have taken place on 2026-05-31. Country: Turks & Caicos Islands. Website: www.stellar.tc. Stellars mission is to bring resilient connectivity to mobility, enterprise, and governments, by combining the very best of terrestrial (cellular, Wi-Fi, fiber) and satellite networks into one unbreakable solution.Stellar Telecommunications SAS ("Stellar"), was founded in 2021 as a truly European company: headquartered in Bordeaux, France, it also runs critical activities from Luxembourg.- Database- Production Config https://www.stellar.tc/
katholiekamersfoort.nl
June 2, 2026
•[ ransomware, leak, education ]
katholiekamersfoort.nl was listed as a victim on the leak site of the stormous ransomware group; the attack is estimated to have taken place on 2026-06-02. Sector: Education. Country: Netherlands. Website: katholiekamersfoort.nl. The church website's network (katholiekamersfoort.nl/) has been breached, resulting in the exfiltration of over 10 GB of data. This data pertains to donors, staff, and the personal information of a large number of individuals. The compromised data includes: Databases and Personally Identifiable Information (PII), internal network shares and document, contact lists, board and committee data, as well as system metadata.
Lead Company (Leadership Boulevard)
June 3, 2026
•[ ransomware, education, leak ]
Lead Company (Leadership Boulevard) was listed as a victim on the leak site of the ShadowByt3$ ransomware group; the attack is estimated to have taken place on 2026-06-03. Sector: Professional Services. Company Site: leadschool.in size: 765.9MB This is will be quick. The following schools are affected: The specific schools explicitly named in the exfiltrated folders include: - Arya Vidyapith - Aakarsh International Public School - Students High School - Rainbow International Matric Hr. Sec. School - Vignan Private School The following info was stolen: 1. Personally Identifiable Information (PII) of Students - Full Names and Demographics: Complete names of children sorted by gender and admission numbers. - Academic Progression: Exact tracking of student grade levels (e.g., SKG, Class 1, Class 2) and division assignments - Age and Vital Records: Exact dates of birth (DOB) for all enrolled students. - Physical Locations: Full residential addresses, cities/districts (such as Nampally, Telangana), and exact localized postal pincodes 2. Guardian and Parent Contact Registries - Parent Identity: Full names of both fathers and mothers linked directly to their children. - Direct Contact Methods: Active personal mobile numbers for parents, creating a severe vulnerability for automated spam or voice-phishing attacks. - Digital Contact: Parent email addresses intended for formal school updates. - Student Led Events - Teacher Certificates - gac-reports - Assessments 3. Proprietary LEAD School Academic Metrics - ELGA Placement Data: Internal academic tracking metrics, showing specific curriculum tiers like "ELGA Class" (e.g., ELGA02, ELGA06) and "ELGA Division" for individual students. - Classroom Analytics: Operational performance data exfiltrated directly from the nucleus.leadschool.in administrative portal. - Teacher Resources: Lesson plans, training modules, and classroom resources that form the core commercial assets of the LEAD platform.
Hal Otey Financial
June 3, 2026
•[ ransomware, financial, leak ]
Hal Otey Financial was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-06-03. Sector: Financial Services. Hal Otey Financial offers a range of financial services including wealth management, financial
planning, retirement planning, investment management, estate planning, and tax planning.
We will upload corporate data soon. Lots client data (passports, DLs, social security numbers,
health and insurance files and so on), contracts and agreements, detailed financials, projects,
etc.
Colina Financial Advisors
June 1, 2026
•[ ransomware, leak, finance ]
Colina Financial Advisors was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-06-01. Sector: Financial Services. Country: Bahamas. Colina Financial Advisors Limited (CFAL) is a prominent, independent wealth management and investment advisory firm based in Nassau, The Bahamas. Established in 1997, it serves as the investment arm of Colina Holdings Ltd.. The firm provides diverse financial services to both individual and institutional clients.
While customers continue to entrust the company with their money, senior executives are actively working to cover up a major data breach involving approximately 500 GB of highly confidential data.
The leak includes, but is not limited to:
1. Client Personally Identifiable Information (PII)
2. Client Financial Profiles & Asset Data
3. Proprietary Business Intel & System Data
4. Holistic Estate & Legal Planning
5. Regulatory & Compliance Records
Stay tuned for further updates.
Geske Haus- und Versorgungstechnik GmbH
May 7, 2026
•[ ransomware, manufacturing, leak ]
Geske Haus- und Versorgungstechnik GmbH was listed as a victim on the leak site of the spacebears ransomware group; the attack is estimated to have taken place on 2026-05-07. Sector: Manufacturing. Country: Germany. Website: www.geske-shk.de. Your partner for construction and technology ***.We are your partner for all your heating, plumbing, and sheet metal work needs. Our family-run business, now in its third generation, has stood for quality, innovation, and customer focus for over half a century. Whatever your needs, we are happy to help and look forward to your ***.Our company specializes in its expertise in increasingly complex technologies. From simple liquid fuel heating systems to heat pumps, any customer request can be met quickly and efficiently.-Database-Personal information of employees and clients-Other files https://www.***.de/
Sunrise, Toscana Country Club, AndalusiaCountry Club.
June 3, 2026
•[ ransomware, retail, leak ]
Sunrise, Toscana Country Club, AndalusiaCountry Club. was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-06-03. Sector: Hospitality. Country: Spain. Sunrise Company is a renowned real estate developer and builder specializing in resort and gol
f course communities. Established in 1963, the company has developed over 16,000 homes and con
dominiums, along with creating multiple resort hotels and commercial structures.
Toscana Country Club is a luxury private equity club and residential community located in Indi
an Wells, California, offering an exceptional lifestyle amidst beautiful olive and cypress lan
dscapes.
Andalusia Country Club is a luxurious community near Palm Springs, offering distinctive golf c
ourse homes and a premier country club experience.
Here is the access to 13gb of corporate data of the above mentioned entities. Employee persona
l information including family of the CEO (passports, DLs, death records and so on), contracts
and agreements, detailed financials, clients information, projects, etc.
Click the download button.
You will find several password-free archives. Click on any of them to start the download.
SA2000.COM
June 4, 2026
•[ ransomware, leak, finance ]
SA2000.COM was listed as a victim on the leak site of the stormous ransomware group; the attack is estimated to have taken place on 2026-06-04. Country: Saudi Arabia. Website: SA2000.COM. 150 GB of data has been extracted, including: COMPTABILIT - FACTURES ACHAT / FACTURES PAYER / FACTURES MODIFIES - Banking Informations SA2000 - PAIEMENTS CLIENTS - CLIENTS / PO CLIENTS - FOURNISSEUR / TRANSPORTEURS - EMPLOYS / EMBAUCHE - ACTIONNAIRES - COURRIEL / DOCUMENTS ***.There is still an opportunity to communicate and resolve this situation. We are currently awaiting the company's !
Sicol
June 2, 2026
•[ ransomware, manufacturing, finance ]
Sicol was listed as a victim on the leak site of the spacebears ransomware group; the attack is estimated to have taken place on 2026-06-02. Sector: Manufacturing. Country: Brazil. Website: sicol.com.br. SICOL JS Cobranas e Servios is a Brazilian company specializing in debt collection, credit management, and sales services.They blend digital automation with humanized customer support to help businesses recover debts and optimize their sales workflows.-Personal information of employees and clients -Financial documents -Other files https://***.com.br/
Thoresen Thai Agencies
June 3, 2026
•[ ransomware, leak ]
Thoresen Thai Agencies was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-06-03. Sector: Transportation. Country: Thailand. Website: thoresen.com. ***.com ***.com/c/thoresen-thai-agencies-plc/56951398 Thoresen is a strategic investment holding company listed on the Stock Exchange of Thailand, with a maritime heritage dating back to 1904. Its core business, Thoresen Shipping, operates a modern fleet of dry bulk carriers transporting commodities like ore, coal, grain, and steel across global trade routes. The group serves major industrial clients in mining, agriculture, and energy sectors, combining owned and chartered vessels to deliver flexible, reliable logistics solutions
Liztex Guatemala
June 3, 2026
•[ ransomware, leak, manufacturing ]
Liztex Guatemala was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-06-03. Sector: Manufacturing. Country: Guatemala. Website: liztex.com. ***.com Liztex is a leading Guatemalan textile manufacturer with over 50 years of experience in producing fabrics.
WewanttoinformyouthatourgroupmanagedtobreachandencryptLiztexnetwork.
398GBleakedfromthereasaresultofthisbreach.
Whatkindofdataleaked:
-SAPdata
-contacts
-contracts
-planning
-logistics
-projectsdata
-personaldata
-employeedata
-medicaldata
-partnersdata
-customersdata
-financialdata
-correspondence
-productiondata
-qualitycontroldata
-offersandproposals
-subsidiarydata
-othersensitivebusinessdata
Northern Ohio Regional Multiple Listing Service
June 4, 2026
•[ ransomware, leak, finance ]
Northern Ohio Regional Multiple Listing Service was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-06-04. Sector: Professional Services. Country: United States of America. MLS Now operates on advanced technology to provide members with timely, accurate, and meaningfu
l data and services. The company offers hands-on education, extensive online documentation, and
a robust support help desk staffed by local professionals.
We will upload corporate data soon. Board members information, contracts, NDAs, detailed financ
ials, confidential files, and so on.
National Standard Parts Associates
June 4, 2026
•[ ransomware, manufacturing, leak ]
National Standard Parts Associates was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-06-04. Sector: Manufacturing. NSPA is an American manufacturer specializing in heat shrink terminals and connectors, as well
as heat shrink tubing and installation tools. Their product offerings cater to industries requi
ring reliable sealed electrical systems.
We will upload 53gb of corporate data soon. Employee personal docs (passports, DLs, SSNs and ot
her information), contracts and agreements, a bit of client and partners information, lots of N
DAs, detailed financials, confidential files, and so on.