wtlawllp.co.uk
July 1, 2026
•[ ransomware, leak, finance ]
wtlawllp.co.uk was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-07-01. Sector: Professional Services. Country: United Kingdom of Great Britain and Northern Ireland. Website: wtlawllp.co.uk. WT Law LLP: Internal Documents of a UK Law Firm PROLOGUE Inside: full credit reports with data from ...
robroy.com
July 9, 2026
•[ ransomware, manufacturing, leak ]
robroy.com was listed as a victim on the leak site of the BrainCipher ransomware group; the attack is estimated to have taken place on 2026-07-09. Sector: Manufacturing. Country: United States of America. Website: robroy.com. [AI generated] Rob Roy Industries, operating through robroy.com, is a US-based manufacturer specializing in electrical conduit systems and enclosures. The company produces PVC-coated steel conduit, fiberglass conduit, and industrial enclosures used in corrosive and hazardous environments. Headquartered in Verona, Pennsylvania, Rob Roy serves industries such as oil and gas, chemical processing, wastewater treatment, and utilities, providing durable electrical protection solutions across North America.
txdkj.com
July 10, 2026
•[ ransomware, leak, technology ]
txdkj.com was listed as a victim on the leak site of the blackwater ransomware group; the attack is estimated to have taken place on 2026-07-10. Country: China. Website: txdkj.com. Confidential data will be released soon.
Roofinox
July 10, 2026
•[ ransomware, manufacturing, leak ]
Roofinox was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-07-10. Sector: Manufacturing. Roofinox is an Austrian manufacturer of premium stainless steel specifically engineered for long-lasting roofing and facade systems. The company offers innovative materials with unique matte and textured surfaces that blend beautifully with architecture without creating harsh glare. Thanks to its exceptional corrosion resistance and durability in harsh climates, Roofinox products are recognized as an eco-friendly, virtually timeless architectural solution.
IFC Eur
July 10, 2026
•[ ransomware, leak, automotive ]
IFC Eur was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-07-10. Sector: Financial Services. Country: Germany. Website: www.ifceuropa.com. IFC Europa is a Spanish-based distributor specializing in car audio, automotive lighting, and electronics.
Bär Cargolift Polska Sp. z o.o.
July 10, 2026
•[ ransomware, manufacturing, leak ]
Br Cargolift Polska Sp. z o.o. was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-07-10. Sector: Transportation. Country: Poland. Website: www.barcargolift.pl. Br Cargolift specializing in the manufacturing of hydraulic tail lifts for vehicles, featuring products with capacities from 500 kg to 3,000 kg. The site offers an online WebShop for spare parts, technical support via Br CargoCheck, and operator training, with a local headquarters in Gdask.
Grupolider | Grupo Actual
July 10, 2026
•[ ransomware, leak, manufacturing ]
Grupolider | Grupo Actual was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-07-10. Sector: Professional Services. Country: Angola. Website: grupolider-ao.com. The leaked files will be available for download on May 10, 2026. Grupolider is a prominent Angolan conglomerate that has been operating in the national market since 1999. Headquartered in Catete, Luanda, the group initially started as a freight forwarding company and has since diversified into a wide range of sectors including agriculture, construction, and furniture. Grupo Actual is a human resources and recruitment agency in Portugal that provides temporary work solutions, permanent recruitment, and selection services.Following a rebranding in late 2025, the company formerly known as Leader now operates under the Actual brand.
Integra and Operosa
July 10, 2026
•[ ransomware, leak, technology ]
Integra and Operosa was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-07-10. Sector: Professional Services. Country: Italy. Website: www.caa.it. The leaked files will be available for download on May 10, 2026. C.A.A. "Giorgio Nicoli" S.r.l. Integra S.r.l L'Operosa S.p.A.
BARCELONA URBAN PROPERTY CHAMBER
July 10, 2026
•[ ransomware, leak, finance ]
BARCELONA URBAN PROPERTY CHAMBER was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-07-10. Sector: Professional Services. Country: Spain. Website: cpubcn.com.
Židlochovice city
July 10, 2026
•[ ransomware, government, leak ]
idlochovice city was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-07-10. Sector: Government & Defense. Country: Czechia. Website: www.zidlochovice.cz. Internal city administration documents have been leaked. Personal data from the database will be sold on darknet forums. Mayor 'Jan Vitula' claims the attack was prevented and no data was stolen. An investigation has been launched with the police, and countermeasures are being taken. =) xD In press: https://www.denik.cz/regiony/zidlochovice-hackeri-kyberneticky-utok-vykupne-data-software-ransomware-kldr.html https://www.irozhlas.cz/zpravy-domov/poslete-bitcoiny-nebo-vas-nepustime-k-datum-urad-v-zidlochovicich-zjistuje-skody_2603172012_bva https://www.***.cz/cs/aktuality/dulezite-upozorneni-mimoradne-uzavreni-meu.html Over 150 gigabytes of internal data
Abhay Prabhavana
July 10, 2026
•[ ransomware, leak ]
Abhay Prabhavana was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-07-10. Sector: Other. Country: India. Website: abhayprabhavana.org.
Borger ISD
July 10, 2026
•[ ransomware, leak, education ]
Borger ISD was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-07-10. Sector: Education. Country: United States of America. Website: borgerisd.net. Borger Independent School District serves approximately 2,500 students on six campuses in Hutchinson County, Texas. The district fails to foster a collaborative environment for students, parents, and the community. They are not responsible or committed to ensuring the security of your data. This is not the first time they have neglected their students, with confidential information about staff, students, and their parents, as well as all incidents, the district's financial situation, and other information they concealed, leaking online. We offer you 330 GB of this information.
Lopes Law
July 10, 2026
•[ ransomware, leak, finance ]
Lopes Law was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-07-10. Sector: Professional Services. Country: United States of America. Website: lopeslawllc.com. ***.com zoominfo.com/c/lopes-law-llc/449811320 Lopes Law LLC is a Philadelphia-based law firm founded by Anthony Lopes that specializes in franchise law, representing both franchisees and franchisors nationwide. The firm provides comprehensive legal services including Franchise Disclosure Document (FDD) reviews, franchise agreement negotiations, and dispute resolution using transparent flat-fee pricing. In addition to franchise expertise, the practice acts as fractional general counsel for businesses and offers specialized tax law services to help companies navigate complex legal landscapes
Open Options
July 10, 2026
•[ ransomware, technology, leak ]
Open Options was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-07-10. Sector: Professional Services. Country: Ireland. Website: ooaccess.com. ***.com Open Options was a prominent Texas-based software company specializing in open-architecture access control solutions, best known for its flagship enterprise platform, DNA Fusion. The company focused on delivering scalable physical security and identity management software tailored to complex organizational needs. Following a strategic acquisition, the company's technology and brand were integrated into Acre Security, where it continues to operate and evolve as DNA Fusion by acre security
Allied Plumbing & Heating
July 11, 2026
•[ ransomware, leak ]
Allied Plumbing & Heating was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-07-11. Sector: Professional Services. Website: www.alliedpnh.com.
Carolina Agri-Power
July 11, 2026
•[ ransomware, leak ]
Carolina Agri-Power was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-07-11. Sector: Agriculture and Food Production. Country: United States of America. Website: www.carolinaap.com.
wrtworld.com
July 12, 2026
•[ ransomware, retail, leak ]
wrtworld.com was listed as a victim on the leak site of the m3rx ransomware group; the attack is estimated to have taken place on 2026-07-12. Sector: Professional Services. Country: United States of America. Website: wrtworld.com. +1 (305) 884-3700 , WRT World Enterprises is a leading provider of purchasing and logistics services tailored for major retailers in Latin America. The company specializes in streamlining supply chain management through services such as shipping, storage, purchasing, and vendor management. With a focus on innovative solutions, WRT helps its clients remain competitive by offering order purchasing technology and comprehensive logistics services. Their extensive network and established relationships with suppliers enable them to negotiate favorable prices, ensuring their clients have access to the best products in the market. Stolen: 377 GB 267,891 Files
foreconinc.com
July 12, 2026
•[ ransomware, leak, manufacturing ]
foreconinc.com was listed as a victim on the leak site of the m3rx ransomware group; the attack is estimated to have taken place on 2026-07-12. Sector: Professional Services. Country: United States of America. Website: foreconinc.com. +1 (716) 664-5602 , FORECON Inc. specializes in custom-crafted forest management, due diligence, appraisal, analytics, and rural brokerage services across New York, Pennsylvania, and West Virginia. Established in 1954, the company focuses on balancing the needs of people and the environment through sustainable forestry practices. Their services include technical, advisory, and valuation support for forestry projects, land management, and conservation solutions. Additionally, FORECON offers a HuntLease program that connects landowners with hunters to promote wildlife management and forest health. Stolen: 860 Gb 437,048 Files
Community Advocates
July 12, 2026
•[ ransomware, leak, finance ]
Community Advocates was listed as a victim on the leak site of the anubis ransomware group; the attack is estimated to have taken place on 2026-07-12. Sector: Professional Services. Law firm clients' personal data exposed.
ARM
July 13, 2026
•[ ransomware, technology, leak ]
ARM was listed as a victim on the leak site of the D1R ransomware group; the attack is estimated to have taken place on 2026-07-13. Sector: Technology. Country: United Kingdom of Great Britain and Northern Ireland. Website: arm.com. Thanks to leaked database by Synopsys, a roadmap was provided Many other group leaks were cross-referenced and thoroughly analyzed One of the leaked companies gave our team access to ARM center Severely incapacitated by 2FA email/sms-code required by ARM on every step, we were still able to download an interesting tool: Athena Download Manager That requires an SSL certificate of a company that owns ARM products, and downloading by means of Athena allows to bypass multiple 2FA checks that are required when downloading same files from www.arm.com This is now free for download to any reverse engineer on Earth and beyond, thanks to Synopsys company data negligence:
