ferretornillos.com
April 25, 2025
•[ ransomware, retail, leak ]
ferretornillos.com was listed as a victim on the leak site of the L Group ransomware group; the attack is estimated to have taken place on 2025-04-25. Sector: Retail & E-Commerce. Country: Mexico. Website: ferretornillos.com.
ATMS
August 7, 2026
•[ ransomware, leak, financial ]
ATMS was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-08-07. Sector: Transportation. Country: India. Unauthorized access has been gained to the company's confidential files, including client data, proprietary R&D, and financial documentation.
CONTINENTAL.AERO
August 7, 2026
•[ ransomware, transportation, leak ]
CONTINENTAL.AERO was listed as a victim on the leak site of the clop ransomware group; the attack is estimated to have taken place on 2026-08-07. Sector: Transportation. Country: United States of America. Website: CONTINENTAL.AERO.
Louisville Bar Association
August 8, 2026
•[ ransomware, leak ]
Louisville Bar Association was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-08-08. Sector: Professional Services. Country: United States of America. Website: loubar.org. The Louisville Bar Association (LBA) provides a range of services including membership benefits, legal job placement, continuing legal education (CLE), and public service initiatives. It aims to support legal professionals at all stages of their careers while promoting diversity and community engagement within the legal field. The LBA also offers resources for individuals seeking legal representation and hosts various events and awards to recognize outstanding contributions in the legal community. Their intended clients include legal professionals, law firms, and individuals in need of legal assistance in the Louisville area.
studiotibaldi.it
August 9, 2026
•[ ransomware, leak ]
studiotibaldi.it was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-08-09. Sector: Professional Services. Country: Italy. Website: studiotibaldi.it. Studio Associato Tibaldi is an Italian professional firm based in Rome, founded over 40 years ago, specializing in condo...
East Field Corporation
August 9, 2026
•[ ransomware, leak ]
East Field Corporation was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-09. Sector: Agriculture and Food Production. Country: Japan. Website: efc-tono.com.
RAK Construction
August 9, 2026
•[ ransomware, manufacturing, leak ]
RAK Construction was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-09. Sector: Manufacturing. Country: India. Website: rakconstruction.in. rakconstruction.in zoominfo.com/c/rak-construction/1266108608 RAK Construction is a premier construction company based in Bangalore, India, with over 20 years of industry experience.
They specialize in delivering high-quality residential and commercial building projects as a leading civil contractor.
The company employs a dedicated team of professionals focused on providing reliable construction and contracting services.
PharmaEssentia
August 9, 2026
•[ ransomware, healthcare, leak ]
PharmaEssentia was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-09. Sector: Healthcare. Country: Taiwan. Website: pharmaessentia.com. pharmaessentia.com zoominfo.com/c/pharmaessentia-corp/145441146 PharmaEssentia is a global biopharmaceutical innovator founded in 2003 and headquartered in Taiwan.
It specializes in developing best-in-class therapies and biologics for blood disorders, hematologic cancers, and other serious diseases.
The company is fully integrated and operates internationally with a strong commercial and clinical presence in the U.S., Europe, and Japan.
Supportive Insurance Services
August 10, 2026
•[ ransomware, finance, leak ]
Supportive Insurance Services was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-08-10. Sector: Financial Services. Country: United States of America. Website: supportiveis.com. Supportive Insurance Services is a specialized insurance compliance firm that provides comprehensive licensing solutions for agents, agencies, adjusters, and carriers across the United States. The company helps clients navigate complex, state-specific regulatory requirements, ensuring full compliance while reducing administrative burdens and operational risk. By managing every aspect of the licensing process with precision and personalized service, Supportive Insurance Services enables insurance professionals to focus on client service and business growth. The firms expertise, deep industry knowledge, and client-centered approach make it a trusted partner for insurance organizations seeking efficient and reliable licensing support.
The company headquarters is located in 1610 S Old Decker Road, Vincennes, IN 47591, United States.
11-50 Employees
Service Evaluation Concepts
August 11, 2026
•[ ransomware, leak ]
Service Evaluation Concepts was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-11. Sector: Professional Services. Country: United States of America. Website: www.serviceevaluation.com.
flowco-inc.com
June 30, 2026
•[ ransomware, leak, manufacturing ]
flowco-inc.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-06-30. Sector: Other. Country: United States of America. Website: flowco-inc.com. DEEP WELL: Flowco Production Solutions Documents PROLOGUE Payroll records with employee names and po...
Holstrom, Block & Parke, A Professional Law
September 11, 2025
•[ ransomware, leak ]
Holstrom, Block & Parke, A Professional Law was listed as a victim on the leak site of the Ethics ransomware group; the attack is estimated to have taken place on 2025-09-11. Sector: Professional Services. Country: United States of America. Website: hbplaw.com. Our attorneys have experience handling cases in all areas of family law, estate planning, appeals, and probate law
City Government of Baguio
August 10, 2026
•[ ransomware, government, finance ]
City Government of Baguio was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-08-10. Sector: Government & Defense. Country: Philippines. Website: baguio.gov.ph. The City Government of Baguio stands as one of the wealthiest and most prominent local governments in the Philippines. This leak includes highly sensitive and confidential data, such as official contracts, legal permits, identification documents, financial statements, construction blueprints, project proposals, procurement records, and other classified administrative materials. [Size: 2.9 GB | Sector: Government, Finance, Construction]
SHELL.COM (August 2026)
August 5, 2026
•[ ransomware, leak, energy ]
SHELL.COM (August 2026) was listed as a victim on the leak site of the clop ransomware group; the attack is estimated to have taken place on 2026-08-05. Sector: Energy & Utilities. Country: United Kingdom of Great Britain and Northern Ireland. Website: SHELL.COM. Data exfiltrated included the following: Engineering drawings, photos of the facilities, scans of facility testing reports, project plans Total size: 89Gb Revenue: $2,673,000,000,000
ALDOGROUP.COM (ALDOSHOES.COM)
August 5, 2026
•[ ransomware, leak, retail ]
ALDOGROUP.COM (ALDOSHOES.COM) was listed as a victim on the leak site of the clop ransomware group; the attack is estimated to have taken place on 2026-08-05. Sector: Retail & E-Commerce. Country: Canada. Website: ALDOSHOES.COM. Data exfiltrated included the following: TSV files, soft, Projects, Cad-files Total size: 424Gb Revenue: $14,800,000,000
PARTECH.COM
August 5, 2026
•[ ransomware, technology, leak ]
PARTECH.COM was listed as a victim on the leak site of the clop ransomware group; the attack is estimated to have taken place on 2026-08-05. Sector: Technology. Country: United States of America. Website: PARTECH.COM. Data exfiltrated included the following: Database, Project, Cad-files, Backups Total size: 24Gb Revenue: $475,700,000
CORNELIUS.COM
August 5, 2026
•[ ransomware, leak, manufacturing ]
CORNELIUS.COM was listed as a victim on the leak site of the clop ransomware group; the attack is estimated to have taken place on 2026-08-05. Country: United States of America. Website: CORNELIUS.COM. Data exfiltrated included the following: Database, Project, PDF, TXT, DOC - files Total size: 3684Gb Revenue: $269,800,000
TRISTAR.COM
August 5, 2026
•[ ransomware, leak, technology ]
TRISTAR.COM was listed as a victim on the leak site of the clop ransomware group; the attack is estimated to have taken place on 2026-08-05. Country: United States of America. Website: TRISTAR.COM. Data exfiltrated included the following: Database, Project - files Total size: 1579,9Gb Revenue: $1,000,000,000
BRILLONCONSUMER.COM (BRILLONCONSUMER.COM)
August 5, 2026
•[ ransomware, leak, retail ]
BRILLONCONSUMER.COM (BRILLONCONSUMER.COM) was listed as a victim on the leak site of the clop ransomware group; the attack is estimated to have taken place on 2026-08-05. Sector: Retail & E-Commerce. Country: Mexico. Website: BRILLONCONSUMER.COM. Data exfiltrated included the following: Database, Project - files Total size: 22,4Gb Revenue: $100,000,000
CLOVER.COM
August 5, 2026
•[ ransomware, retail, technology ]
CLOVER.COM was listed as a victim on the leak site of the clop ransomware group; the attack is estimated to have taken place on 2026-08-05. Sector: Retail & E-Commerce. Country: United States of America. Website: CLOVER.COM. Data exfiltrated included the following: Database, Project - files Total size: 651Gb Revenue: $400,000,000
