Ingelectus Innovative Electrical Solutions S.L.
October 26, 2026
•[ ransomware, energy, technology ]
Ingelectus Innovative Electrical Solutions S.L. was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Energy & Utilities. Country: Spain. smart grid engineering firm Spain | Live electrical telemetry sampled from the plant control network, with voltage, current and energy readings recorded on 23 October 2026; Complete inventory of 49 network devices including substation switches, remote terminal units, power meters and server management controllers, with locations and firmware details; Full maps of the internal control network segments and message broker metrics that carry the plant data | [NOT PAID EXPOSED]
Roberts Consulting Services
October 28, 2026
•[ ransomware, leak ]
Roberts Consulting Services was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-10-28. Sector: Professional Services. Website: jsrconsulting.com. RCS is a full-service engineering firm specializing in Construction Materials Testing, Construc
tion Engineering and Inspection (CEI), and QA/QC services, founded in 2013. With over 60 years
of combined FDOT experience, RCS provides high-quality professional services to clients in road
way and bridge construction projects throughout Central Florida.
We will upload 28gb of corporate data soon. Detailed employee information (passport scans, DLs,
SSN), contracts and agreements, client information, financials, NDA, etc.
Trulife
October 28, 2026
•[ ransomware, healthcare, leak ]
Trulife was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-10-28. Sector: Healthcare. Website: trulife.com. Trulife is an internationally recognized company with over 60 years of experience in the develo
pment and manufacture of specialized healthcare and consumer products. Their extensive product
range includes breastcare solutions, orthotics, lower limb prosthetics, walking aids, and press
ure care products.
We will upload 68gb of corporate data soon. Detailed employee information (passport scans, DLs,
medical certs, birth certs), contracts and agreements, confidential files (employee violations
, terminations and so on), financials, NDA, etc.
Innoe Asesores
October 30, 2026
•[ ransomware, leak ]
Innoe Asesores was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Professional Services. Country: Mexico. Website: www.innoeasesores.com.
FrenchCreek Production
October 30, 2026
•[ ransomware, manufacturing, leak ]
FrenchCreek Production was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Energy & Utilities. Country: United States of America. FrenchCreek Fall Safety specializes in manufacturing high-quality fall protection equipment. Th
eir product range includes harnesses, lanyards, self-retracting lifelines, and comprehensive sa
fety systems for various applications, including confined space entry and rescue.
We will upload 40gb of corporate data soon. Detailed employee information (phones numbers, addr
esses and so on), contracts and agreements, client and partners information, financials, specif
ications and so on.
Cipsa Industrias Sa De Cv
October 30, 2026
•[ ransomware, manufacturing, financial ]
Cipsa Industrias Sa De Cv was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Manufacturing. Country: Mexico. Cipsa Industrias Sa De Cv Compania Industrial Papelera Poblana, S.A. de C.V. (CIPPSA) and Tubos y Empaques de Puebla, S.A. de C.V. (TEPSA / KJAS TEPSA), a Mexican corrugated cardboard, packaging and paper-tube manufacturer. Complete employee HR records: names, dates of birth, home addresses, phone numbers, personal and corporate email addresses, CURP, RFC, IMSS numbers, salaries and employee badge photographs.Payroll records, tax data, fiscal validation files and HSBC payroll-bank files containing employee account and CLABE data.Information showing executive compensation through an **honorarios** arrangement outside the regular payroll system.Financial and industrial reports, sales/procurement/payroll budgets, production costs, operational analytics, invoices and accounting records.Customer complaint records and overdue receivables data.Occupational-safety, psychosocial-risk, industrial-incident and hazardous-waste documentation. More
Cherry Bekaert
October 28, 2026
•[ ransomware, leak, manufacturing ]
Cherry Bekaert was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-28. Sector: Professional Services. Country: United States of America. Website: cbh.com. cbh.com Revenue $446.7 Million CBH Group Australia's largest grain cooperative, founded in 1933 in Perth and owned by over 3,700 farmer shareholders across Western Australia. It operates the world's largest grain export network with around 200 receival sites, 20 million tons of storage capacity and four export terminals at Kwinana, Albany, Geraldton and Esperance. Each year it handles approximately 20 million tons of grain and exports 15 to 17 million tons, mainly wheat, barley and canola to Asia, the Middle East and beyond. Led by CEO Brendan White, it has invested over 2 billion dollars in infrastructure modernization including rail upgrades, solar energy and digital platforms like the CBH App. The cooperative is financially strong with a BBB credit rating and returns profits to farmers through patronage dividends. It operates its own rail fleet of 360 wagons, runs quality testing laboratories at every site and is expanding port capacity to load Panamax vessels at Kwinana and Albany.
SoftwareOne
October 26, 2026
•[ ransomware, technology, leak ]
SoftwareOne was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Technology. Country: Turkey. Website: softwareone.com. softwareone.com SoftwareOne Turkiye is the Turkish arm of SoftwareOne Holding AG, a Swiss-listed global software and cloud solutions provider that merged with Crayon to form a 13,000 person company operating in over 70 countries. Based in Ataehir, Istanbul and active since 2019, it employs around 40 to 60 people and works with 100 percent of Turkey's top 50 companies and 80 percent of the top 500. Services span software licensing advisory for Microsoft, IBM and Oracle, cloud migration across Azure, AWS and Google Cloud, DevSecOps, cybersecurity, AI and FinOps. In December 2024 SoftwareOne AG acquired full ownership of the Turkish entity, approved by the Turkish Competition Authority. Led by Managing Director Doa Pekdemir and CFO Hakan Keri, it has delivered projects for Turkish Airlines, TAV Airports, Coca-Cola and Vakf Katlm. Key strengths are its unmatched enterprise market coverage in Turkey and full access to the global SoftwareOne and Crayon ecosystem.
nelsenarchitects.com
September 28, 2026
•[ ransomware, technology, leak ]
nelsenarchitects.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Professional Services. Country: United States of America. Website: nelsenarchitects.com. This article is based on a portion of the company's internal documents to which we gained access. Every statement has coordinates file, date, line number. Personal data has been masked the company failed to protect it, so we are protecting it.
Machelen (Belgium)
October 27, 2026
•[ ransomware, government, healthcare ]
Machelen (Belgium) was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-10-27. Country: Belgium. Website: machelen.be. Machelen (Belgium) Machelen (Belgium) - municipal and social welfare (OCMW) file servers1.3 million files, ~2.9 TB. Working copy + backup copy (lawer2/lawer3). Language: Dutch, partly French.Contents:Social welfare and migration service client files: passports, ID cards, residence permits, sick notes.WZC nursing home: medical files, staff HR dossiers, workplace accidents.Civil status records (births, marriages) with national register numbers (NISS/RRN).Payslips, financial data.Correspondence (~23k messages), employee home folders.Databases and backups: full OCMW database backup (6 GB, 09/2026), 645 .mdb databases, 12,873 .dbf, 110 .bak (17 GB).Verified: 13,319 files with personal data. Among them - a valid Belgian ID card (expiry 02/2029), Belgian and Moroccan passports, national register numbers (RRN), sick notes with patient addresses, medical documents (GDPR Art. 9 special categories). More
Ryder
October 27, 2026
•[ ransomware, transportation, leak ]
Ryder was listed as a victim on the leak site of the Whitearmor ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Transportation. Country: United States of America. Ryder is a Fortune 500 transportation and supply chain management company providing fleet management, dedicated transportation, and logistics solutions.
What we hold: 18.75M rows, 328 CSVs, consumer names, phones, emails, driver/associate PII, cleartext API keys, LMS credentials, FTP/telematics configs from RyderView, RLM, EFT.
Our demand is only $20M in BTC... i swear.
Samples can be found below.
Emails with instructions will be sent to Ryder shortly, and no we did not buy access from 'shadowbyte' or whatever the niggas name is on pwnforums.
Contact if you do not receive the instructions:
Session: 0547b7f96d469ecb332e89d0108e71c92df5bacff6c4ed5b9801ab5fffe872ee67
Email: whitearmorrxd@proton.me
chicagolawyer.com
October 30, 2026
•[ ransomware, leak, finance ]
chicagolawyer.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Professional Services. Country: United States of America. Website: chicagolawyer.com. Chicago Personal Injury Lawyers Award-Winning Injury Lawyers At Staver Accident Injury Lawyers, we face powerful insurance companies head-on, using our decades of experience to help injury victims like you get the compensation you deserve. SAIL to victory with our winning team.
Acodafe
October 26, 2026
•[ ransomware, technology, leak ]
Acodafe was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Country: Colombia. Website: acodafe.com. acodafe.com Acodafe S.L. is a Spanish IT services company founded in 2009 in Matar, Barcelona, providing managed IT, network installation, cybersecurity, cloud backups, data center hosting and GDPR consulting for small and medium businesses. Led by sole administrator Adrin Conde Kuller, it has just 4 employees and annual revenue between 500,000 and 1.5 million euro. The company grew sales by 22.8 percent in 2024 and climbed over 12,000 positions in Spain's national business ranking. Its services cover the full IT lifecycle for SMEs and industrial clients from system maintenance and installation to 24/7 emergency support. In 2019 it expanded into data protection consulting, a growing regulatory niche in Spain. Key strengths are 17 years of market presence, a lean and profitable operation and a diversified service portfolio tailored to small business needs.
Digital Triumph
October 31, 2026
•[ ransomware, leak, technology ]
Digital Triumph was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-31. Sector: Technology. Country: Malaysia. telecommunications services Malaysia | Employee payroll records with names, national identity numbers and wages, statutory filings 2016 to 2025; Audited financial statements, tax filings and company bank account numbers; 2,552 customer invoices and delivery orders; The full customer service data room covering 309 organizations including banks, an embassy and government offices; The CRM customer database and the company mail archive, 8,700+ verified business emails with customer correspondence | [NOT PAID EXPOSED]
orex.co.th
September 1, 2026
•[ ransomware, healthcare, leak ]
orex.co.th was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-09-01. Sector: Other. Country: Thailand. Website: orex.co.th. Orex Trading Co., Ltd. is a Thai trusted distributor and one-stop service provider of medical products, pharmaceuticals,...
reignwoodpark.com
September 1, 2026
•[ ransomware, retail, leak ]
reignwoodpark.com was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-09-01. Sector: Hospitality. Country: China. Website: reignwoodpark.com. Reignwood Park Thailand is a luxury real estate and integrated lifestyle development project by Reignwood Group a le...
www.alphaplantes.com
September 1, 2026
•[ ransomware, leak ]
www.alphaplantes.com was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-09-01. Sector: Agriculture and Food Production. Country: Canada. Website: www.alphaplantes.com. Alphaplantes (Service d'Entretien des Plantes Alpha Inc.) is a Canadian family-owned company founded in 1970, headquarte...
Regent Christian Online Academy
October 27, 2026
•[ ransomware, education, leak ]
Regent Christian Online Academy was listed as a victim on the leak site of the Booba Project ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Education. Country: Canada. Website: www.rcoa.ca. Hospitals and Health Care Stolen data: 26 GB.
Horizon Eye Specialists & LASIK Center
October 27, 2026
•[ ransomware, healthcare, leak ]
Horizon Eye Specialists & LASIK Center was listed as a victim on the leak site of the Booba Project ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Healthcare. Country: United States of America. Website: www.horizonlaservision.com. Medical Practices Stolen data: 121 GB.
BASS Medical Group
October 27, 2026
•[ ransomware, leak, healthcare ]
BASS Medical Group was listed as a victim on the leak site of the Booba Project ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Healthcare. Country: United States of America. Website: www.bassmedicalgroup.com. Medical Practices Stolen data: 100 GB.
