EKEPIS
August 14, 2026
•[ ransomware, leak, government ]
EKEPIS was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-14. Country: Greece. Website: ekepis.gr. ekepis.gr rocketreach.co/ekepis-ethniko-kentro-pistopoiisis-domon-profile_b6d46b6ac7408ffe EKEPIS was Greece's National Centre for the Accreditation of Continuing Vocational Training, responsible for certifying adult educators and lifelong learning providers. The organization no longer exists, as its accreditation and certification duties were absorbed by EOPPEP (), the National Organisation for the Certification of Qualifications and Vocational Guidance. Today, anyone looking for their services must go through EOPPEP or the official Greek government portal, since the old ekepis.gr domain is no longer an official resource.
Carhartt, Inc.
August 13, 2026
•[ ransomware, leak, retail ]
Carhartt, Inc. was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-08-13. Sector: Retail & E-Commerce. Country: United States of America. Website: carhartt.com. Our demand for this Company was $3.3 million. The Company reached out. However, The Company did not try to negotiate. If The Company attempted to negotiate with us The Company would've ended up saving a good chunk of money. Instead they decided to do (see blow); this is also because The Company hired a very unskilled and incompetent negotiator. If The Company hired competency to negotiate for them, this post would've never been published. [21:24:22] carhartt: After careful review and internal discussions with leadership, we have decided not to move forward with negotiations or further discussions. We appreciate your patience throughout this process. There is millions of customers of data involved here. As we always say, these companies don't care. Millions of records of customer data and vast amount of sensitive information and PII containing employee, customer, customer metadata (royalty info), and other internal corporate data was compromised. The Company failed to reach an agreement with us despite our incredible patience, all the chances and offers we made. They don't care. | Size: 50GB+ (compressed) | Updated: 13 August 2026 | SHA256: 6b37f770382ce82bfa4677466cc51d9269e5a70436eecf101fae6fa9d5d8e8ac
Tapper Cuddy LLP
August 11, 2026
•[ ransomware, leak ]
Tapper Cuddy LLP was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-08-11. Sector: Professional Services. Country: Canada. Website: tappercuddy.com. Tapper Cuddy LLP is a full-service law firm based in Manitoba, specializing in civil litigation, family law, and commercial law. With over 40 years of experience, the firm is dedicated to providing personalized legal representation in a clear and understandable manner. They prioritize client relationships, viewing clients as people rather than cases, and aim to serve a diverse range of legal needs across more than 20 specialized practice areas. Tapper Cuddy LLP is committed to reconciliation and collaboration with Indigenous communities, reflecting their respect for the traditional territories they operate on.
The company headquarters is located in 1000330 St. Mary Avenue, Winnipeg, MB R3C 3Z5, Canada. 51-200 Employees
tecnoabi.com
August 14, 2026
•[ ransomware, technology, leak ]
tecnoabi.com was listed as a victim on the leak site of the m3rx ransomware group; the attack is estimated to have taken place on 2026-08-14. Sector: Technology. Country: Brazil. Website: tecnoabi.com. Tecnologas de Cdigo Abierto S.L., trading as Tecnoabi, is a Mlaga, Spain-based B2B software development firm registered in 2008 that specializes in Java, .NET, and proprietary solutions such as VirtRoom and CMMS software. Located in Mlaga TechPark, the company maintains extensive expertise in after-sales management systems and is an official Google Play developer. For more details, visit the official website at tecnoabi.com. Stolen: 300 GB 63,434 Files
Urban Worldwide
August 14, 2026
•[ ransomware, leak ]
Urban Worldwide was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-14. Sector: Other. Country: Netherlands. Website: www.urbanworldwide.com.
ZEBRA.COM
August 14, 2026
•[ ransomware, manufacturing, leak ]
ZEBRA.COM was listed as a victim on the leak site of the clop ransomware group; the attack is estimated to have taken place on 2026-08-14. Sector: Manufacturing. Country: United States of America. Website: ZEBRA.COM. Data exfiltrated included the following: Database, Project - files, CAD - files Total size: 8Tb Revenue: $5,600,000,000
Turner and Townsend
August 14, 2026
•[ ransomware, leak, manufacturing ]
Turner and Townsend was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-08-14. Sector: Professional Services. Country: United Kingdom of Great Britain and Northern Ireland. Website: turnerandtownsend.com. [AI generated] Turner and Townsend is a global professional services company headquartered in the United Kingdom. Founded in 1946, it operates in the construction, real estate, infrastructure, and natural resources sectors. The firm provides project management, cost management, and programme management services. It operates in over 50 countries, serving both public and private sector clients across major capital investment programmes worldwide.
www.amca.org.ar
August 15, 2026
•[ ransomware, leak, finance ]
www.amca.org.ar was listed as a victim on the leak site of the blackwater ransomware group; the attack is estimated to have taken place on 2026-08-15. Sector: Professional Services. Country: Argentina. Website: www.amca.org.ar. system breach, data blocking
RapidFort
August 15, 2026
•[ ransomware, technology, leak ]
RapidFort was listed as a victim on the leak site of the xpl0itrs ransomware group; the attack is estimated to have taken place on 2026-08-15. Sector: Technology. Country: United States of America. Website: rapidfort.com. Software supply chain security
motorenmaier gmbh
August 15, 2026
•[ ransomware, manufacturing, leak ]
motorenmaier gmbh was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-15. Sector: Manufacturing. Country: Germany. Website: www.motorenmaier.de.
Arnall Golden Gregory
August 16, 2026
•[ ransomware, leak ]
Arnall Golden Gregory was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-16. Sector: Professional Services. Country: United States of America. Website: www.agg.com.
actua.fr
August 7, 2026
•[ ransomware, leak, technology ]
actua.fr was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-08-07. Sector: Professional Services. Country: France. Website: actua.fr. Groupe Actua is a recruitment and temporary staffing agency headquartered in Strasbourg, founded in...
Thecourierguy
August 16, 2026
•[ ransomware, leak ]
Thecourierguy was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-08-16. Sector: Transportation. Country: South Africa. Website: thecourierguy.co.za. Organization with 2018 emails extracted. Domain: thecourierguy.co.za
Bija Industrie
August 16, 2026
•[ ransomware, manufacturing, leak ]
Bija Industrie was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-08-16. Sector: Manufacturing. Country: France. Website: bija-industrie.com. Organization with 693 emails extracted. Domain: bija-industrie.com
tiltstudio.com
July 27, 2026
•[ ransomware, technology, leak ]
tiltstudio.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-07-27. Sector: Technology. Country: Germany. Website: tiltstudio.com. The Tilt Studio Archives Investigation of a Corporate Archive Leak from an Entertainment Network PRO...
Albania's Official National Teacher Training Portal
August 16, 2026
•[ ransomware, leak, education ]
Albania's Official National Teacher Training Portal was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-08-16. Sector: Education. Country: Albania. Albanias official national teacher training portal provides centralized professional development resources and accredited programs for educators nationwide.
This leak include data such as;
Roughly ~100k Full national ID numbers, full names and teacher certificates in PDF. [Size: 5.9 GB | Sector: Education, Government]
Planungsgruppe M+M AG
August 17, 2026
•[ ransomware, leak, technology ]
Planungsgruppe M+M AG was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-08-17. Sector: Professional Services. Country: Germany. Website: dieplanungsgruppe.de. Planungsgruppe M+M AG is a German Aktiengesellschaft headquartered in Bblingen, Baden-Wrttemberg, with approximately 432 employees across 10 offices (Bblingen, Stuttgart, Mnchen, Nrnberg, Regensburg, Ingolstadt, Augsburg, Esslingen, Mannheim, Frankfurt). Annual revenue: approximately 52 million. The firm provides architecture, urban planning, structural engineering, building physics, fire protection, BIM, landscape planning, and interior design services. Over 5,200 projects completed across decades of operation.
The exfiltrated dataset spans two complete file servers (MMBB04, MMBB05), plus the DATEV financial processing archives, SFirm banking software databases, the ELO document management system, Outlook email archives (PSTs), and payroll/HR data a total of 268 GB across approximately 124,000 files, covering 2006 to 2026.
4M REALTY COMPANY
August 17, 2026
•[ ransomware, retail, leak ]
4M REALTY COMPANY was listed as a victim on the leak site of the Global Secret Group ransomware group; the attack is estimated to have taken place on 2026-08-17. Sector: Retail & E-Commerce. Country: United States of America. Website: 4mrealty.com. Country: Texas, US |
Website: 4mrealty.com |
Revenue: $5 Million |
Industry: Real Estate Brokerage, Real Estate Sales, Property Sales, Commercial Real Estate |
Employees: 20-50 |
Properties: 237 GB (54,995 Files, 4,600 Folders)
SpearFin Ltd
August 18, 2026
•[ ransomware, finance, leak ]
SpearFin Ltd was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-08-18. Sector: Financial Services. Country: Mauritius. SpearFin Ltd
https://spearfin.net
SpearFin offers a wide range of services including fund administration, corporate services, compliance support, and investor relations.
Assets Under Administration US$10 billion.
The leak occurred on June 26, 2026.
Total leak: 416 GB
Leak included: NDA, Correspondence Client, KYC - Passports, Certificates, Investing documents,
Share Registry and Holders, Anti-Money Laundering (AML) audit, Agreements, Application forms, Bank Statements,
Bank Payrolls, Loans Documents, Certificates of GBC (Global Business Company), Register of Directors and many other financial documents.
Clients: YuMee Seven Six, BAMBOO BAY PRIVATE LIMITED, Asio Global Fund, 3B Capital, Abans Group, Amicorp Capital, Apex Fund Services Ltd, Pangaea Fund Limited,
AL Farah Overseas Limited, Zinnia Group, AMG Services Ltd, NEO SEMI SG PTE. LTD, MIC ELECTRONICS LIMITED, Zenbridge Capital Pvt. Ltd., Zinnia Investment Advisers Pvt Ltd,
Onpoint Ventures Limited, Wilson Group, Blue River, Capital Advisors Private Limited, Zenbridge Capital Pvt Ltd,
Topland Group Holdings, Africa Opportunities Fund, Appollo Fund Limited and many other...
Type of information: Confidential
Full publication coming soon...
R & D Machine and Engineering
August 18, 2026
•[ ransomware, leak, manufacturing ]
R & D Machine and Engineering was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-08-18. Sector: Manufacturing. Country: United States of America. Website: rdmachine.com. &D Machine and Engineering, LLC specializes in CNC machining of precision metal components primarily for the aerospace, defense, and space industries. The company is known for its ability to maintain tight tolerances and produce complex geometries using advanced 5-axis milling and coordinate measuring machines. With a commitment to quality, R&D Machine has built a strong customer base that includes respected blue-chip companies like NASA. Acquired by Compass Precision in 2022, the company continues to focus on manufacturing mission-critical components for demanding applications.
