Mogren, Glessner & Ahrens, P.S.
August 20, 2026
•[ ransomware, leak, finance ]
Mogren, Glessner & Ahrens, P.S. was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-08-20. Sector: Professional Services. Country: United States of America. Website: mgrlaw.com. Services in family law
Klasko Immigration Law Partners
August 22, 2026
•[ ransomware, leak ]
Klasko Immigration Law Partners was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-08-22. Sector: Professional Services. Country: United States of America. Website: klaskolaw.com. [AI generated] Klasko Immigration Law Partners is a US-based immigration law firm headquartered in Philadelphia, Pennsylvania. The firm specializes in business immigration law, assisting corporations and individuals with employment-based visas, green cards, and compliance matters. It serves multinational companies, healthcare organizations, and academic institutions, providing legal counsel on navigating US immigration regulations and workforce mobility challenges.
Flecha Bus
August 22, 2026
•[ ransomware, leak ]
Flecha Bus was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-08-22. Sector: Transportation. Country: Argentina. Website: flechabus.com.ar. [AI generated] Flecha Bus is an Argentine intercity bus company operating in the passenger transportation industry. Founded in the mid-20th century, it provides long-distance coach services connecting Buenos Aires with various provinces across Argentina. Known for offering multiple service categories including standard and premium seating options, Flecha Bus is one of the prominent operators in Argentina's extensive national road transport network.
Layher
August 21, 2026
•[ ransomware, manufacturing, leak ]
Layher was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-21. Sector: Manufacturing. Country: Chile. Website: layher.cl. layher.cl zoominfo.com/c/layher-del-pacifico-sa--layher-chile/1319092699 Layher Chile is the local branch of the globally renowned German manufacturer specializing in scaffolding and access systems.
They supply high-quality scaffolding solutions, safety equipment, and event structures for the construction, industrial, and infrastructure sectors.
The company provides comprehensive services, including product sales, equipment rentals, custom engineering design, and technical support for complex projects across the country.
Namyang Industrial Co., Ltd.
August 23, 2026
•[ ransomware, leak, manufacturing ]
Namyang Industrial Co., Ltd. was listed as a victim on the leak site of the Barracuda ransomware group; the attack is estimated to have taken place on 2026-08-23. Sector: Manufacturing. Country: South Korea. Website: nyi.co.kr. Selling fresh full database dumps of company Namyang Industrial Co., Ltd. (renamed to Namyang Nexmo).
Infrastructure dump, not website! There information about employers, manufacturing, parts, clients, partners and etc. Total lines (csv format): 17 641 181. | Severity: HIGH | Size: 2.51 GB | Status: free | FREE
FRUCASTRO SL
August 23, 2026
•[ ransomware, leak, manufacturing ]
FRUCASTRO SL was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-08-23. Sector: Agriculture and Food Production. Country: Spain. Recent databases, important documents [Size: 540.1 MB | Sector: Manufacturing]
Aurore Development S.p.A.
August 23, 2026
•[ ransomware, leak ]
Aurore Development S.p.A. was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-23. Sector: Other. Country: Italy. Website: www.auroredevelopment.it.
adt.com
August 23, 2026
•[ ransomware, technology, leak ]
adt.com was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-08-23. Sector: Professional Services. Country: United States of America. Website: adt.com. ADT is a security company that offers security systems, cameras, alarms ad home automation services....
CyrusOne, LLC.
August 23, 2026
•[ ransomware, technology, leak ]
CyrusOne, LLC. was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-08-23. Sector: Technology. Country: United States of America. Website: cyrusone.com. Update 23 Aug : We are removing the clients name off this post. They are refusing to pay a $13 million demand. They have 24 hours left to engage with us. We hold 12.9 million Salesforce records along with: Sharepoint:
(369.6 GB Compressed / 645 GB Uncompressed)
288,729 Files, 60,513 Folders
- More than 182,000 rows of Customer data Extracted from the "Contacts" Salesforce Object. - Over 8,300 Rows of Employee PII (Full Name, Email, Job Title, Phone Number, ect.) - Thousands of executed contracts, MSAs, NDAs, amendments, leases, and SOWs - Extensive physical key inventory logs, verification photos, and contractor Green Badge audits - Large collection of data center drawings, floor plans, electrical one-line diagrams, security system drawings, and site schematics - Full CERM (Critical Environment Reliability Management) process library - Physical and information security policy suite plus governance materials - Regional security scorecards, KPI workbooks, GAM sheets, and signed performance packages - Credential and access-control artifacts (including PasswordList.xlsx, Okta SSC Access lists, active badge reports, and multiple Data Center Access Control forms) This is a final warning to reach out by end of day 24 Aug 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 23 Aug 2026 | Warning: FINAL WARNING PAY OR LEAK
Federis Abogados
August 24, 2026
•[ ransomware, leak ]
Federis Abogados was listed as a victim on the leak site of the Booba Project ransomware group; the attack is estimated to have taken place on 2026-08-24. Sector: Professional Services. Country: Mexico. Website: www.federisabogados.com. Law Practice Stolen data: 61 GB.
Coldfish Seafood
August 24, 2026
•[ ransomware, leak, manufacturing ]
Coldfish Seafood was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-24. Sector: Agriculture and Food Production. Country: Canada. Website: www.coldfish.ca.
Chernyy & Associates
August 24, 2026
•[ ransomware, leak ]
Chernyy & Associates was listed as a victim on the leak site of the Booba Project ransomware group; the attack is estimated to have taken place on 2026-08-24. Sector: Professional Services. Country: Russian Federation. Website: www.chernyy-law.com. Law Practice Stolen data: 67 GB.
Design-Aire Engineering, INC
August 24, 2026
•[ ransomware, manufacturing, leak ]
Design-Aire Engineering, INC was listed as a victim on the leak site of the Dark Project ransomware group; the attack is estimated to have taken place on 2026-08-24. Sector: Manufacturing. Country: United States of America. Website: www.daengineering.com. About Design-Aire Engineering, INC Design-Aire Engineering specializes in mechanical, electrical, plumbing, and energy engineering services. They focus on providing innovative and sustainable solutions for their clients. The company serves a diverse range of clients, including those in the public and private sectors. With a commitment to green engineering practices, they aim to enhance energy efficiency and environmental sustainability. Design-Aire Engineering, INC has suffered a cyberattack on its service systems, resulting in the theft of approximately 377GB of sensitive data. The breached information includes employees' personal data and detailed architectural plans of clients' buildings.
Jones, Little & Co., CPAs, LLP
August 24, 2026
•[ ransomware, finance, leak ]
Jones, Little & Co., CPAs, LLP was listed as a victim on the leak site of the Dark Project ransomware group; the attack is estimated to have taken place on 2026-08-24. Sector: Professional Services. Country: United States of America. Website: www.jonesandlittle.com. About Jones, Little & Co., CPAs, LLP Jones, Little & Co., CPAs, LLP is a professional accounting firm that offers a wide range of services including business accounting, tax preparation, and IRS problem resolution. They cater to small businesses, non-profit organizations, and specialized industries such as auto dealers and retailers. At least 100 gigabytes of company dataincluding financial records, internal files, and employee personal informationwere stolen in a cyberattack. Hackers encrypted the firm's systems after exfiltrating the documents, leaving operations paralyzed.
SHAHEEN LAW GROUP PLC - Richmond, Virginia, USA
August 24, 2026
•[ ransomware, leak, finance ]
SHAHEEN LAW GROUP PLC - Richmond, Virginia, USA was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-08-24. Sector: Professional Services. Country: United States of America. Website: slgjustice.com. Family law firm, established 1995 by Victor A. Shaheen (2025 - the General Assembly of Virginia honored him with a resolution; google it, it is touching). Now run by his three sons. 48 employees across four offices: Richmond, Midlothian, Virginia Beach, Newport News. What do they do? They close 150+ real estate transactions EVERY MONTH for some of the largest corporate relocation programs in America. When a Fortune-500 moves an employee to Virginia, this firm holds that employee's Social Security Number, bank wiring details, home address, family identities, and sometimes their medical clearance. They hold everyone's future in a shared folder. We now hold the folder. WHAT WE TOOK 36,788 files 27GB 21,789 fully read 67,000+ SSN patterns (their own dedup says 6,017 real people we will let their customers decide which number to believe) EVIDENCE SERIES PREVIEW (from their actual files) - S1 DEEDS WITH SOCIAL SECURITY NUMBERS File: "5053815 - Unsigned Deed.docx" (verbatim from their server): "***-**-XXXX B H Social Security Number ***-**-XXXX J H Social Security Number 10356 Ashburn Road, North Chesterfield, VA 23235" File: "Kelley 5042085 - DEED.docx": "PURCHASER(S): N S SELLER'S NAME: S E. K SS#: ***-**-XXXX ...including the withholding of twenty percent (20%) of the sales proceeds." FIRPTA: foreign sellers. IRS will want this list. We have it. Thousands of these. Every deed folder = a name, a number, an address, a transaction. Their client roster IS the leak. - S3 INSIDE THEIR BANKING & THEIR NETWORK File: "shared_Accounting/Banking/Other Banking/Shaheen DDA Statements SunTrust DDA" (email from SunTrustOnlineCourier to their own staff headers verbatim): Received: from barracuda.shaheenlaw.com ([10.0.0.6]) by ricdcex1.shaheenlaw.com ... X-ASG-Debug-ID: 1291233029-... for ; Wed, 1 Dec 2010 Why we publish an email HEADER: their internal map is in it. Barracuda at 10.0.0.6. Exchange "ricdcex1". Domain SHAHEENWORLD. We did not forget how to enter. Neither will the next group, when we sell the map. 150 banking statement attachments ride along in this folder. - S5 THE CLIENT LIST, WRITTEN IN FOLDERNAMES They named folders after their customers. Verbatim paths: shared_PENDING_SALE/HENNY/Closed Files/ Wisniewski-Markel, Suzanne_5027384_12263 Eagle ... Merza, Jamal & Adrienne_5027826_811 Woodberry ... Name, file number, STREET ADDRESS in the path itself. Marketing lists sell for money. This one is annotated with purchase history. Relocation buyers are premium leads. - S2 MEDICAL - S4 LITIGATION Held. 120 medical files exist (their own audit counted them). Litigation: we confirm their December escrow dispute is public (Porchlight Homes v. Almeida & Shaheen, Henrico google it, BizSense covered it). Virginia residents: 18.2-186.6. Illinois relocations: BIPA. Opposing counsel and journalists: samples on request. Media & researchers: samples on request, we answer fast We keep our word to everyone who pays. We keep it also to everyone who does not.
Dentist in New Britain, CT
August 25, 2026
•[ ransomware, healthcare, leak ]
Dentist in New Britain, CT was listed as a victim on the leak site of the Dark Project ransomware group; the attack is estimated to have taken place on 2026-08-25. Sector: Healthcare. Country: United States of America. Website: dentistinnewbritain.com. About Dentist in New Britain, CT Dentist in New Britain has spent over a decade caring for families across New Britainpairing modern technology with the kind of warmth you don't expect from a dental office. As a result of the attack, the following were compromised: the entire customer database, consisting of just over 8,000 files, as well as a small number of records containing Social Security numbers
Pump Engineering Company
August 25, 2026
•[ ransomware, manufacturing, leak ]
Pump Engineering Company was listed as a victim on the leak site of the Dark Project ransomware group; the attack is estimated to have taken place on 2026-08-25. Sector: Manufacturing. Country: United States of America. Website: www.pumpengineering.net. About Pump Engineering Company Pump Engineering Company is a full-service distributor and supplier of industrial pumps, parts, and fluid handling systems, serving Southern California since 1946. During the cyberattack, 120,000 files (115 GB) were stolen, including an extensive customer database, insurance documents, confidential financial documents, and a vast number of project drawings.
Davis & Ferber
October 8, 2025
•[ ransomware, leak ]
Davis & Ferber was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-10-08. Sector: Professional Services. Website: davisferber.com. Davis & Ferber LLP is a personal injury and malpractice law firm based in New York, specializin
g in various legal areas including medical malpractice, motor vehicle accidents, nursing home a
buse, and family law.
We will upload 60gb of corporate data soon. Detailed personal client information (passports, DL
s, addresses, SSNs, death/birth certs, phones and so on for almost a thousand people), confiden
tial files, court files, hearings, police reports, NDAs, etc.
WINTER Ingenieure
August 11, 2026
•[ ransomware, manufacturing, leak ]
WINTER Ingenieure was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-08-11. Sector: Manufacturing. Country: Germany. Website: winter-ingenieure.de. WINTER Ingenieure specializes in planning and monitoring the construction of technical building
equipment across Germany, focusing on functionality, sustainability, and cost-effectiveness. W
ith a team of over 140 employees located in Dsseldorf, Berlin, and Hamburg, they integrate tec
hnical components into buildings innovatively.
We will upload 340gb of corporate data soon. Employee personal information (German passports, I
Ds, addresses, phones contacts), confidential files, projects, lots of specifications and so on
.
A-Plus Software Limited
August 25, 2026
•[ ransomware, sqlinjection, technology ]
A-Plus Software Limited was listed as a victim on the leak site of the ShadowByt3$ ransomware group; the attack is estimated to have taken place on 2026-08-25. Sector: Technology. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.a-plussoft.com. We Breached A-plus through a sql injection vulnerability and downloaded everything in there backend. We gained access to there system on 08/18/2026
The following data was stolen:
1. Website User Data (`usr.csv`)
- This file contains the administrative backend infrastructure for the website, exposing:
- 10 internal accounts, including the usernames `admin`, `debuger`, `camby`, `asuka`, `jimmy`, `ricole`, and `green`.
- Password hashes (SHA-1 format) revealing that almost all administrative users shared the exact same password.
- Internal access metadata
2. Marketing and Public Web Content
- The remaining four files contain the text, configuration, and structural layout used to display information to visitors on `a-plussoft.com`:
`- products.csv`
13 lines): The master list of software solutions and mobile apps sold by the company (such as SalesAnywhere).
`- product_content.csv` (101 lines): The detailed marketing descriptions, features, specifications, and text modules displayed on individual product pages.
`- news.csv` (89 lines): The text content of all historical corporate announcements, updates, and press releases published by the company.
`- news_cate.csv` (2 lines): The category organization tags used to sort the news section on the website
Uncompressed size
total records: 211
2,787,292 Bytes, which equals 2.6582 Megabytes (MB).
mirror 1: https://anonfilesnew.com/s/XtgbXhRkQQ8
mirror 2: https://pixeldrain.com/u/jUpuUyj9
