Full List

Search

Search Results (leak)

• bnlawmacau.com www.bn-ip.com September 24, 2026 • [ ransomware, leak ] bnlawmacau.com www.bn-ip.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-09-24. Sector: Professional Services. Country: Macau. full data all country
• NEAD Pro September 24, 2026 • [ ransomware, finance, legal ] NEAD Pro was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-09-24. NEAD Pro Nead Pro is a professional multidisciplinary firm based in Gorizia and Udine, Italy, that provides legal, tax, bankruptcy, and accounting consulting services.What it is: a network share belonging to two Italian professional firms located at Via Roma 20, Gorizia (Friuli-Venezia Giulia):NEAD SRL (NORTH EAST ADVISORS S.R.L.) - an accounting firm, dottore commercialista, P.IVA 01114220310, REA GO-72906;NEAD PRO - PROFESSIONISTI RIUNITI - a law firm, P.IVA 01157140318.Volume: ~575,000 files / ~253 GB. The root contains a single branch Nuova directory\NEAD\ (plus an empty Documenti folder and a scatter of PDF scans at the root level).Structure and contents:Branch Volume ContentsNEAD PRO SITE - Documenti 231,137 files / 193.5 GB Law firm: 03.PRATICHE (46,620 files: CIVILE 9,665, PENALE 537, SOVRAINDEBITAMENTO 1,208), 04. INCARICHI (85,321: FALLIMENTI 22,492, ESECUZIONI 28,509, ADS 14,547, TRUST, CURATELE), SEGRETERIA with CREDENZIALI VARIE.xlsx (~40 firm accounts: SPID, PEC, banks, 2 cards with full PAN+CVC, safe code), bank scans (BANCOMAT PIN, BCC agreements)NEAD SRL SITE - Documenti 101,125 / 55.3 GB Accounting firm: 03.CLIENTI - 199 active + 184 former client folders (730, CU, F24, contracts), 44 private SOGEI Entratel .P12 keys (signing clients' tax returns), ISA/IRAP tax filings 20192020, client master data, Account.xlsxPRIMA NOTA - Documenti 1,885 / 871 MB Cash books 20192026 (21 xlsx): CASSA / CONTO CORRENTE / POS / CARTA / SISTERPOWERBI - Documenti 548 / 627 MB 37 financial BI models .pbix (BI_ISIDE, BI_NEAD, ATHENA, PNAI)ARCHIVIO 921 / 2.6 GB MPS bank statements 20202024, NEAD SRL account closure, firm mail archivePOSTA SARDAMAR / PANEGIOCHI / ISIDE / ADMIN SRL ~165+ / ~174 MB Client and firm mail: IVECO Capital leasing, accertamento Agenzia Entrate, Capitaneria di Porto, verbali poliziaES. IMM. 112-2024 10 files Real-estate enforcement proceedings (Tribunale di Gorizia): bank statements and CIE (ID cards) of auction participantsNEAD root ~85 PDF / 127 MB Scanned bank statements, F24 forms, IPZS envelope with the PIN/PUK of a CIE cardMost sensitive data: client dossiers with tax codes (codici fiscali), court case files (civil/criminal/bankruptcy), medical documents (Art. 9 GDPR), the firm's credential database with full PAN+CVC of two cards and the safe code, 52 Entratel electronic signature keys, ~100 SEPA mandates with IBANs and signatures, client PST archives (7.5 GB), a client's Huawei phone backup (Facebook/Gmail/Telegram databases), passports of foreign shareholders. More
• pharma5.ma September 25, 2026 • [ ransomware, healthcare, leak ] pharma5.ma was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-09-25. Sector: Healthcare. Country: Morocco. Website: pharma5.ma. Pharma5 21, Rue des Asphodles, Marif Extension, 20100 Casablanca, Morocco 05 22 23 62 15 pharma5.ma Leaked data: 50Gb Corporate and financial information, data on products and their supply, quality control and certification, drug testing and related issues, employee personal data, counterparties, and much more.
• taspenlife.com September 22, 2026 • [ ransomware, leak, healthcare ] taspenlife.com was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-09-22. Sector: Healthcare. Country: Kazakhstan. Website: taspenlife.com. Taspen Life offers a range of insurance products including health protection, group protection, and...
• PuroClean September 21, 2026 • [ ransomware, leak ] PuroClean was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Other. Country: United States of America. Website: puroclean.com. puroclean.com purocleanfranchise.com PuroClean is North America's largest privately owned property damage restoration franchise, known as "The Paramedics of Property Damage", with 500+ franchise locations across the U.S., Canada, and Puerto Rico, headquartered in Tamarac, Florida. It provides 24/7 emergency services water damage mitigation, fire and smoke restoration, mold remediation, biohazard cleanup, and reconstruction responding within two hours, and is a preferred provider for 3 of the top 5 U.S. insurance carriers. The brand was launched in 2001 under the legal entity PuroSystems, LLC; in 2015 it was acquired by Mark W. Davis (former co-founder/CEO of Belfor North America) and Frank Torre, who grew the network from 222 to 500+ locations. The franchisor's audited revenue is $31.8 million (FY2025), while system-wide franchise sales exceed $400 million, with an average franchise unit generating ~$942K per year.
• International Chemical Co. September 26, 2026 • [ ransomware, manufacturing, leak ] International Chemical Co. was listed as a victim on the leak site of the Barracuda ransomware group; the attack is estimated to have taken place on 2026-09-26. Sector: Manufacturing. International Chemical Company (ICC) manufactures specialty metalworking fluids, industrial cleaners, rust preventatives, and custom chemical formulations. We have extracted the most important files from their main file server and possess data on their sales, formulas, patents, manufacturing, contracts, and partners. For example, we possess the full formulation and manufacturing instructions for I.C.C.s patented Biodraulic hydraulic oil. And even more than that. It is available for sale to competitors. Victim website: https://e-icc.com | Severity: HIGH | Size: 90 GB | Status: selling | $50,000
• ARCA UNLIMITED Architects September 22, 2026 • [ ransomware, leak ] ARCA UNLIMITED Architects was listed as a victim on the leak site of the BlackLocks ransomware group; the attack is estimated to have taken place on 2026-09-22. Sector: Professional Services. Country: South Africa. Views: 49
• SiteProRentals September 28, 2026 • [ ransomware, manufacturing, leak ] SiteProRentals was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Hospitality. SitePro Rentals is a Texas-based construction and industrial equipment rental company founded in 2021. A subsidiary of Sammons Industrial, it rents aerial lifts, forklifts, and earthmoving equipment, serving contractors across the U.S. from over 30 locations. We have every employee's Social Security number. Home addresses. Birth dates. Salaries. We know who's sick, who's on leave, who got fired and why. We also have 338,000 pay records.... Shortly, you will receive an email containing the instructions on how to proceed with this situation. The ransom is relatively small, just $150k USD in XMR... If you do not receive the email, contact us at: Email: xdlmfao@morke.ru Session: 05651c7323273b723588d47455471ee9e27feb5187a30f2933554a705aacb38358 [Sector: Construction]
• Holiday Inn Vilnius September 28, 2026 • [ ransomware, leak ] Holiday Inn Vilnius was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Hospitality. Country: Lithuania. Website: Holiday Inn Vilnius. The property operates under the international Holiday Inn brand of IHG Hotels & Resorts. The hotel provides 134 guest rooms,
• Juntadeandalucia September 28, 2026 • [ ransomware, government, leak ] Juntadeandalucia was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Government & Defense. Country: Spain. Website: juntadeandalucia.es. Organization with 198 emails extracted. Domain: juntadeandalucia.es
• Netech (Neeser Technik AG) September 28, 2026 • [ ransomware, leak, manufacturing ] Netech (Neeser Technik AG) was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Manufacturing. Country: Switzerland. Netech (Neeser Technik AG) is a Swiss engineering and industrial services company based in Seuzach. It specializes in comprehensive maintenance, retrofitting, and overhauls of industrial machinery and manufacturing systems. The firm provides end-to-end technical support for production facilities, covering mechanical engineering, pneumatics, and electrical control systems.
• bakemyday.se September 28, 2026 • [ ransomware, retail, leak ] bakemyday.se was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Retail & E-Commerce. Country: Sweden. Website: bakemyday.se. Bake My Day vill erbjuda fler mnniskor hantverksmssiga, kta och genersa konditori- och bageriupplevelser! Vra rykande frska brd och bakverk r bakade frn grunden fr hand p utvalda rvaror. Employees: 10 Revenue: $5 Million Phone Number: 010 199 71 71
• iccsi.com September 29, 2026 • [ ransomware, technology, leak ] iccsi.com was listed as a victim on the leak site of the m3rx ransomware group; the attack is estimated to have taken place on 2026-09-29. Sector: Professional Services. Website: iccsi.com. +1 (781) 331-9811. Interconnect Computer Cabling Services, Inc. is a full-service telecommunications company that has been operational since 1986, providing services for a diverse range of projects including education, medical facilities, hospitality, and corporate offices. The company specializes in telecommunications solutions and has recently developed touchless wave door opening systems to address safety concerns for clients returning to office spaces. Their clientele includes local schools, national railroad services, country clubs, and various commercial establishments. Interconnect is committed to delivering high-quality services tailored to the needs of their clients. Stolen: 434 GB 341,547 File
• northeastrehab.com September 29, 2026 • [ ransomware, healthcare, leak ] northeastrehab.com was listed as a victim on the leak site of the BrainCipher ransomware group; the attack is estimated to have taken place on 2026-09-29. Sector: Healthcare. Country: United States of America. Website: northeastrehab.com. [AI generated] N/A I don't have reliable, verified information about a specific company operating at this domain. Rather than provide potentially inaccurate details about its services, industry specifics, or operational location, I'm flagging this as unconfirmed. If you have access to threat intelligence databases, WHOIS records, or can share verified details about this domain, I can help analyze that information instead.
• goriteway.com September 29, 2026 • [ ransomware, leak, transportation ] goriteway.com was listed as a victim on the leak site of the BrainCipher ransomware group; the attack is estimated to have taken place on 2026-09-29. Country: United States of America. Website: goriteway.com.
• mccordclaims.com September 29, 2026 • [ ransomware, financial, leak ] mccordclaims.com was listed as a victim on the leak site of the BrainCipher ransomware group; the attack is estimated to have taken place on 2026-09-29. Sector: Financial Services. Country: United States of America. Website: mccordclaims.com. [AI generated] N/A I don't have verified information about a company operating at "mccordclaims.com." Rather than speculate about its industry, services, or country of operation, I should note that this appears to be a claims-related domain name (possibly insurance claims adjusting, legal claims, or similar), but I cannot confirm details without reliable, verifiable data about this specific entity.
• Tommy Garner Air Conditioning Heating September 29, 2026 • [ ransomware, leak, technology ] Tommy Garner Air Conditioning Heating was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-29. Sector: Professional Services. Country: United States of America. Website: tommygarner.com. tommygarner.com zoominfo.com/c/tommy-garner-air-conditioning--heating/140230813 Tommy Garner Air Conditioning & Heating (Tommy Garner, Inc., founded 1986 by Tommy and Chrissy Garner in Newport News, Virginia) is a family-owned Class A HVAC contractor serving the Hampton Roads region for 40 years. It provides commercial and residential air conditioning, heating, generators (authorized Honeywell dealer), water heaters, commercial refrigeration and indoor air-quality solutions with 24-hour emergency service, 30-day service guarantees and 1-year installation warranties. Led today by founder Tommy Garner alongside his son Zach and daughter Lauren Jett, the company employs 3539 people and was named Virginia Peninsula Chamber Small Business of the Year 2024 and a 2025 Best Places to Work in Virginia (the only HVAC firm on the list). Its reputation is exceptional an A BBB rating and 5-star reviews from clients including the Virginia Living Museum
• Groupe APROSEP September 29, 2026 • [ ransomware, leak, technology ] Groupe APROSEP was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-29. Sector: Other. Country: Senegal. Website: groupe-aprosep.com. groupe-aprosep.com guyanasso.org Groupe APROSEP (founded 1994, Cayenne, French Guiana) is a solidarity-economy network (groupement d'conomie solidaire) that unites and professionalizes associations across the region, focusing on employment insertion, training and social innovation. It runs several affiliated structures LIANE (job integration), OFA Guyane (training), GEIQ Jeun'ESS and GEPSL (shared employers for sports/youth/childcare jobs) and the Conciergerie Solidaire all housed in "L'Accordeur," a 1,600 m PTCE-labeled cooperative hub in downtown Cayenne supporting about 500 jobs and 240 associations. Led since 1997 by director Jean-David Poquet under president Jos Othily, the group celebrated its 30th anniversary in June 2025 and runs flagship projects like an AVIP integration crche (30 places), the EVA illiteracy-assessment center and the social enterprise Tisanes de Camopi. Its partner network spans France Travail, ANLCI, Orange
• Gardeners' Guild September 30, 2026 • [ ransomware, leak ] Gardeners' Guild was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Agriculture and Food Production. Country: United States of America. Website: gardenersguild.com. Gardeners' Guild is a full-service landscaping company based in the SF Bay Area, specializing in both interior and exterior landscape maintenance and construction. Founded in 1972 and employee-owned, they offer a range of services including irrigation repair, sustainable landscaping, and fire fuel reduction. Their clients include multi-family communities, commercial buildings, business parks, hospitality venues, and residential properties. The company is dedicated to transforming and maintaining landscapes while promoting water conservation and drought-tolerant designs. The company headquarters is located in 2780 Goodrick Avenue, Richmond, CA 94801, United States. 51-200 Employees
• dfiretailgroup.com September 8, 2026 • [ ransomware, leak, retail ] dfiretailgroup.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-09-08. Sector: Retail & E-Commerce. Country: United States of America. Website: dfiretailgroup.com. DFI RETAIL GROUP 27 Years of Email Archives + 397 Illegal Stores + 40,000 Medical Files Over 160 mai...