HİDROMEK
June 30, 2026
•[ ransomware, manufacturing, leak ]
HDROMEK was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-06-30. Sector: Manufacturing. Country: Turkey. Website: www.hidromek.com. HDROMEK is a leading Turkish manufacturer of heavy construction machinery recognized globally for its high-performance award-winning heavy equipment. Founded in Ankara in 1978 by mechanical engineer Hasan Basri Bozkurt the company operates six state-of-the-art production facilities across Turkey and Thailand. Its heavy machinery operates in more than 130 countries spanning six continents. Over 880 gigabytes of sensitive internal data were stolen from this company
healthlawadvocates.org
July 25, 2026
•[ ransomware, healthcare, leak ]
healthlawadvocates.org was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-07-25. Sector: Professional Services. Country: United States of America. Website: healthlawadvocates.org. Health Law Advocates (HLA), an American non-profit, public interest law firm based in Boston, Massachusetts. Founded in 1996, HLA provides free (pro bono) legal representation to low-income residents and vulnerable populations who face barriers to accessing or paying for healthcare.
Microsoft
July 26, 2026
•[ ransomware, technology, leak ]
Microsoft was listed as a victim on the leak site of the ExfilSquad ransomware group; the attack is estimated to have taken place on 2026-07-26. Sector: Technology. Country: United States of America. Website: microsoft.com. Revenue: $318B
DATA SUMMARY:
8M~ records containing: significant PII, employee and customer contact information, authentication data, password hashes, portal identities, corporate account information, business leads, facilities management records, internal service tickets, and access permissions.
Allstate
July 26, 2026
•[ ransomware, finance, leak ]
Allstate was listed as a victim on the leak site of the ExfilSquad ransomware group; the attack is estimated to have taken place on 2026-07-26. Sector: Financial Services. Country: United States of America. Website: allstate.com. Revenue: $67B
DATA SUMMARY:
657K~ records containing: significant PII, recruitment and licensing information, onboarding data, and internal employee account information.
TaylorMade & Sun Day Red golf
July 26, 2026
•[ ransomware, leak, retail ]
TaylorMade & Sun Day Red golf was listed as a victim on the leak site of the ExfilSquad ransomware group; the attack is estimated to have taken place on 2026-07-26. Sector: Retail & E-Commerce. Country: United States of America. Website: taylormadegolf.com. Revenue: $1.5B
DATA SUMMARY:
2M~ records containing: significant PII, customer support history, orders, shipping information, business account data, financial/account information, internal notes, attachments, and AI support chat transcripts.
Zenith Bank Plc
July 26, 2026
•[ ransomware, finance, leak ]
Zenith Bank Plc was listed as a victim on the leak site of the ExfilSquad ransomware group; the attack is estimated to have taken place on 2026-07-26. Sector: Financial Services. Country: Nigeria. Website: zenithbank.com. Revenue: 2.3T
DATA SUMMARY:
90M~ records containing: extensive PII, banking relationships, account information, financial data, government identifiers, customer contact information, and banking support cases.
servicebypremier.com
July 26, 2026
•[ ransomware, leak, technology ]
servicebypremier.com was listed as a victim on the leak site of the m3rx ransomware group; the attack is estimated to have taken place on 2026-07-26. Sector: Professional Services. Country: United States of America. Website: servicebypremier.com. +1(954) 646-0016 , This local HVAC and Refrigeration company, established in 2007, provides services across South Florida, from Florida City to Port St. Lucie. They specialize in commercial HVAC and refrigeration repairs, including maintenance for A/C and refrigeration equipment. The company prides itself on delivering honest service at reasonable prices, ensuring complete customer satisfaction. Their commitment to integrity and efficiency makes them a trusted choice for businesses in the region. Stolen: --
Contacto Garantido
July 26, 2026
•[ ransomware, leak ]
Contacto Garantido was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-07-26. Sector: Professional Services. Country: Mexico. Website: www.contactogarantido.com.
West Sixth Law
March 20, 2026
•[ ransomware, leak ]
West Sixth Law was listed as a victim on the leak site of the Global Secret Group ransomware group; the attack is estimated to have taken place on 2026-03-20. Sector: Professional Services. Country: United States of America. Website: agslawyers.com. Country: Columbus, Indiana, United States |
Website: agslawyers.com |
Revenue: $5 Million |
Industry: Law Firms & Legal Services |
Employees: 11-50 Employees |
Properties: 328 GB (708,816 Files, 47,925 Folders)
Pro-Tuff | Decals
July 26, 2026
•[ ransomware, leak, retail ]
Pro-Tuff | Decals was listed as a victim on the leak site of the Global Secret Group ransomware group; the attack is estimated to have taken place on 2026-07-26. Sector: Retail & E-Commerce. Country: United States of America. Website: protuffdecals.com. Country: Crystal Lake, US |
Website: protuffdecals.com |
Revenue: $9.6 million |
Industry: Business Services General, Business Services |
Employees: 10-20 |
Properties: 412 GB (589,623 Files, 40,081 Folders)
Wesco International
July 26, 2026
•[ ransomware, manufacturing, leak ]
Wesco International was listed as a victim on the leak site of the ExfilSquad ransomware group; the attack is estimated to have taken place on 2026-07-26. Sector: Manufacturing. Country: United States of America. Website: wesco.com. Revenue: $24B
DATA SUMMARY:
2.6M~ records containing: customer and employee PII, account and contact data, CRM user profiles, credit and business identifiers, authentication metadata, and access information.
Park Manufacturing Corp.
July 26, 2026
•[ ransomware, manufacturing, leak ]
Park Manufacturing Corp. was listed as a victim on the leak site of the Global Secret Group ransomware group; the attack is estimated to have taken place on 2026-07-26. Sector: Manufacturing. Country: United States of America. Website: parkmfg.com. Country: Cambridge, Minnesota 55008, US |
Website: parkmfg.com |
Revenue: $17.9 Million |
Industry: Appliances, Electrical, and Electronics Manufacturing |
Employees: 50-100 |
Properties: 195 GB (411,109 Files, 48,413 Folders)
takethehop.com
July 27, 2026
•[ ransomware, leak, government ]
takethehop.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-07-27. Sector: Hospitality. Country: United States of America. Website: takethehop.com. The HOP, an American regional public transit system operated by the Hill Country Transit District (HCTD). Founded in the 1960s in the state of Texas (USA) as a voluntary transportation service, the organization has grown over the decades into a major public public-transport network.
FLP Law Group LLP
July 27, 2026
•[ ransomware, leak ]
FLP Law Group LLP was listed as a victim on the leak site of the CRPxO ransomware group; the attack is estimated to have taken place on 2026-07-27. Sector: Professional Services. Country: United States of America. Website: flpllp.com. Data size claimed by the group: 42.1 GB. Sector: Legal / Bankruptcy | Data leaked: 42.1 GB
Qube Aviation Catering
July 27, 2026
•[ ransomware, leak ]
Qube Aviation Catering was listed as a victim on the leak site of the CRPxO ransomware group; the attack is estimated to have taken place on 2026-07-27. Sector: Transportation. Country: United States of America. Website: qubeaviationcatering.com. Data size claimed by the group: 22.5 GB. Sector: Aviation / Catering | Data leaked: 22.5 GB
ProSmile Family Dental Care
July 27, 2026
•[ ransomware, healthcare, leak ]
ProSmile Family Dental Care was listed as a victim on the leak site of the CRPxO ransomware group; the attack is estimated to have taken place on 2026-07-27. Sector: Healthcare. Country: United States of America. Website: familydentistmodesto.com. Data size claimed by the group: 9.6 GB. Sector: Healthcare / Dental | Data leaked: 9.6 GB
Louisiana Coalition Against | Domestic Violence
July 24, 2026
•[ ransomware, leak ]
Louisiana Coalition Against | Domestic Violence was listed as a victim on the leak site of the Global Secret Group ransomware group; the attack is estimated to have taken place on 2026-07-24. Sector: Other. Country: United States of America. Website: lcadv.org. Country: US |
Website: lcadv.org |
Revenue: $13.3 Million |
Industry: Non-Profit & Charitable Organizations |
Employees: 201-500 |
Properties: 241 GB (287,451 Files, 31,100 Folders)
Simpkins Law Firm
July 27, 2026
•[ ransomware, leak ]
Simpkins Law Firm was listed as a victim on the leak site of the CRPxO ransomware group; the attack is estimated to have taken place on 2026-07-27. Sector: Professional Services. Country: United States of America. Website: simkins.com. Data size claimed by the group: 31.2 GB. Sector: Legal / Family Law | Data leaked: 31.2 GB
Schorr Law
July 27, 2026
•[ ransomware, leak ]
Schorr Law was listed as a victim on the leak site of the CRPxO ransomware group; the attack is estimated to have taken place on 2026-07-27. Sector: Professional Services. Country: United States of America. Website: schorr-law.com. Data size claimed by the group: 27.6 GB. Sector: Legal / Real Estate | Data leaked: 27.6 GB
Savills France
July 27, 2026
•[ ransomware, leak ]
Savills France was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-07-27. Sector: Professional Services. Country: France. Website: savills.fr.