Porter Hedges LLP
October 21, 2026
•[ ransomware, leak, finance ]
Porter Hedges LLP was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-10-21. Sector: Professional Services. Country: United States of America. [AI generated] Porter Hedges LLP is a full-service business law firm based in Houston, Texas, United States. It operates in the legal services industry, providing counsel in areas such as energy, corporate transactions, finance, litigation, bankruptcy, real estate, and labor and employment law. The firm primarily serves corporate clients, including businesses in the oil and gas sector, and operates within the United States.
srsnodgrass.com
October 21, 2026
•[ ransomware, finance, leak ]
srsnodgrass.com was listed as a victim on the leak site of the BrainCipher ransomware group; the attack is estimated to have taken place on 2026-10-21. Sector: Professional Services. Country: United States of America. Website: srsnodgrass.com. [AI generated] N/A
I don't have reliable, verified information about a company associated with the domain "srsnodgrass.com." Rather than provide speculative or potentially inaccurate details about its operations, industry, or country of origin, I'm flagging this as unknown. If you have additional context, documentation, or details about this entity, I'd be glad to help analyze that information instead.
bereskinparr.com smartbiggar.ca
October 21, 2026
•[ ransomware, leak, technology ]
bereskinparr.com smartbiggar.ca was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-10-21. Sector: Professional Services. Country: Canada. database client case data etc
Whirlpool
October 21, 2026
•[ ransomware, manufacturing, leak ]
Whirlpool was listed as a victim on the leak site of the Whitearmor ransomware group; the attack is estimated to have taken place on 2026-10-21. Sector: Manufacturing. Country: United States of America. Whirlpool is a global home appliance manufacturer (NYSE: WHR) making washers, fridges, and cooking appliances under brands like KitchenAid and Maytag. Its 2025 annual revenue was about $15.52 billion.
We hold 4,577 Whirlpool employee records across three plants, names, AD-style usernames, managers, cost centers, shifts, along with 374 corporate emails, ~22,000 SAP invoice records, and the full plant contact infrastructure. Pay, and this stays quiet. Don't, and the data goes public.
We want $140,000 in BTC or XMR. You will receive an email containing instructions on how to proceed.
Samples:
https://biteblob.com/Information/mNTP6w0lBW8P9l/#samples.zip
Contact:
whitearmorrxd@proton.me
Session: 0547b7f96d469ecb332e89d0108e71c92df5bacff6c4ed5b9801ab5fffe872ee67
Hisense
October 24, 2026
•[ ransomware, technology, leak ]
Hisense was listed as a victim on the leak site of the Whitearmor ransomware group; the attack is estimated to have taken place on 2026-10-24. Sector: Technology. Country: China. Website: Hisense.com. Hisense is a Chinese multinational electronics and appliance manufacturer, founded in 1969, known globally for televisions and home appliances.
We hold Hisense's entire GCRM production document store, the full warranty-claims archive for Malaysia/Singapore: customer names, phones, emails, ID numbers, 2,549 suppliers, hundreds of invoices, payments, contracts, RMA forms, claim evidence, plus their internal CRM app binary.
Our demand is $500,000 in BTC. Good luck.
Contact: whitearmorrxd@proton.me
Session: 0547b7f96d469ecb332e89d0108e71c92df5bacff6c4ed5b9801ab5fffe872ee67
Mach Law APC (San Diego family law and divorce practice)
October 25, 2026
•[ ransomware, leak, finance ]
Mach Law APC (San Diego family law and divorce practice) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-25. Sector: Professional Services. Country: United States of America. Legal Services - Family Law (US) California, USA | Client case files of a San Diego family law practice: divorce, custody and support matters with California court filings (FL-150 financial declarations, FL-300 requests for orders, FL-335 proofs of service) and XSpouse support calculations; Client intake records with Social Security numbers and dates of birth; Client bank statements (Navy Federal, Discover and other institutions) and the practice trust account statements; Client billing roster with balances | [NOT PAID EXPOSED]
TOPLIVO AD
October 25, 2026
•[ ransomware, energy, leak ]
TOPLIVO AD was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-25. Sector: Energy & Utilities. Country: Bulgaria. fuel trading and construction materials Bulgaria | The complete counterparty ledger of a fuel trading company: 694 companies with full legal names, addresses, managing persons, national company numbers, tax numbers and bank account details; More than 3,100 live customs and fuel movement documents from December 2025 through October 2026, and a 12 year archive of more than 46,000 documents from 2014 through 2025; Records of 611 drivers and 651 tanker trucks with registration plates; More than 2.6 million automated tank gauge readings from fuel storage tanks; Named staff accounts of the accounting system | [NOT PAID EXPOSED]
J.B Hunt
October 25, 2026
•[ ransomware, leak ]
J.B Hunt was listed as a victim on the leak site of the Whitearmor ransomware group; the attack is estimated to have taken place on 2026-10-25. Sector: Transportation. Country: United States of America. You are so stupid JB Hunt. Instead of getting in contact with us & starting the negotiation process, not only did you not announce the breach, you silently email customers demanding them to update their passwords..
Fuck you... ;/
Beasley Allen Law Firm
October 26, 2026
•[ ransomware, leak ]
Beasley Allen Law Firm was listed as a victim on the leak site of the Falcon ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Professional Services. Country: United States of America. Plaintiff litigation law firm - Our 214 GB extraction includes executed agreements, final settlement participation agreements, court-signed stipulations regarding net worth, privileged internal memos, detailed litigation strategies, rough trial transcripts, comprehensive staff FAQs and much more.
Antah HealthCare Group
October 26, 2026
•[ ransomware, healthcare, leak ]
Antah HealthCare Group was listed as a victim on the leak site of the crypto24 ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Healthcare. Country: Malaysia. Website: ahcg.com.my. Antah Healthcare Group (AHCG) is one of Malaysia's leading integrated healthcare distribution and commercial partners, specializing in the nationwide marketing, sales, clinical regulatory support, and supply chain logistics of pharmaceuticals, medical equipment, and consumable products to hospitals and clinics.We successfully infiltrated AHCG's network and exfiltrated over 500 GB of highly sensitive data, including human resources and employee records, customer transaction histories, confidential commercial contracts, clinical and regulatory documentation, logistics tracking information, and financial statements.
acclaimcompanies.com
September 8, 2026
•[ ransomware, leak, financial ]
acclaimcompanies.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-09-08. Sector: Professional Services. Country: United States of America. Website: acclaimcompanies.com. The Social Security Numbers of both group executives Gerald C. Johnson Jr. and Mark C. Johnson are fully exposed in corporate documents (IRS Form SS-4). The Johnson Family Trust holds an investment portfolio of $1.67 million at First Republic Bank against a margin loan of $280K, while parent company Acclaim Asset Management simultaneously received two different EINs from the IRS per CP212 notice (January 2025). Baboo Properties LLC, in which Mark C. Johnson is a member, failed to file the required Form 940 for 2015, despite receiving IRS notice CP080. A corporate network of 15+ legal ent
passavant-ee.com
September 25, 2026
•[ ransomware, healthcare, leak ]
passavant-ee.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-09-25. Sector: Healthcare. Country: Estonia. Website: passavant-ee.com. German engineering company Passavant Energy & Environment GmbH, which builds wastewater treatment plants with German and Swiss taxpayer money (KfW, SECO), is in reality controlled by Dubai-based conglomerate Drake & Scull International PJSC and through it finances operations in Iraq. Internal debit notes from Drake & Scull Oil & Gas Iraq Branch show that employees of the Iraqi division flew to Muscat (Oman) and stayed at hotels billed to Passavant Frankfurt, with the company's accounting department at Hahnstrae 31-35 approving those charges for payment. Employee Serikan Kire
Asensus Surgical
October 20, 2026
•[ ransomware, healthcare, technology ]
Asensus Surgical was listed as a victim on the leak site of the Dark Project ransomware group; the attack is estimated to have taken place on 2026-10-20. Sector: Healthcare. Country: United States of America. Website: www.asensus.com. About Asensus Surgical TransEnterix, which rebranded as Asensus Surgical in 2021, pursued the goal of challenging Intuitive Surgical in the robotic surgery market. After the FDA rejected its SurgiBot system in 2016, the company pivoted to the Senhance platform, a digital laparoscopy system featuring haptic feedback and eye-tracking camera control. Despite building a global procedure base, Asensus faced persistent financial difficulties and going-concern doubts, ultimately being acquired by KARL STORZ in 2024. The acquisition marked the end of Asensus as an independent entity, with its Senhance technology now folded into KARL STORZ's broader surgical portfolio. Asensus Surgical fell victim to a cyberattack, resulting in the theft of more than 600 GB of data and over 85,000 files containing confidential information, employees personal documents, research findings, and all of the companys internal information.
centralrogers.com
October 20, 2026
•[ ransomware, leak ]
centralrogers.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-10-20. Sector: Other. Country: United States of America. Website: centralrogers.com. Central is full of people who are committed to fulfilling our mission to Connect People to Christ. It's a family where you can find hope, love and an abundance of grace.
Employees: 20
Revenue: $5 Million
Phone Number: (479) 636.1630
Cascade Flooring America
October 21, 2026
•[ ransomware, retail, leak ]
Cascade Flooring America was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-10-21. Sector: Retail & E-Commerce. Country: United States of America. Cascade Flooring America is a flooring store located in Vancouver, WA, offering a wide range of
products including flooring, furniture, window coverings, and kitchen and bath services. The c
ompany caters to homeowners looking for premium flooring solutions, with options such as carpet
, hardwood, luxury vinyl, laminate, and tile.
We will upload 50gb of corporate data soon. Employee personal information (passports and other
personal information), client information, financials, confidential files, NDA, and so on.
Hanjin Information Systems & Telecommunication Co., Ltd.
October 21, 2026
•[ ransomware, leak, technology ]
Hanjin Information Systems & Telecommunication Co., Ltd. was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-21. Sector: Technology. Country: South Korea. IT services South Korea | A complete corporate identity directory of an IT services company, 999 personnel accounts with names and corporate email addresses; The client staffing structure showing which personnel are seconded to major client organizations; Third party vendor accounts and their corporate domains | [NOT PAID EXPOSED]
Allmand-Smith Limited
October 21, 2026
•[ ransomware, manufacturing, finance ]
Allmand-Smith Limited was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-10-21. Sector: Manufacturing. Country: United Kingdom of Great Britain and Northern Ireland. Website: Allmand-Smith Limited. [distributor, manufacturer] Allmand-Smith Limited (trading as Stormguard) a UK manufacturer and distributor of building products headquartered in Stoke-on-Trent.
Domain admin credentials in plaintext and a full DC dump STORMGUARD\MichaelAdmin / 5t0rmGuard
Complete NatWest banking infrastructure blfw.db (21.3 MB live Bankline database with account numbers, sort codes, payee details, and transaction logs), plus
WorldPay payment gateway credentials (WorldPay Account Details.xlsx), plus Sage 200 AR/AP containing bank details for every customer and supplier across all 15
entities. NatWest has 3 outstanding registered charges (Jun 2026).
Full payroll for every employee, current and former Payroll.zip (6.1 GB, 1,185 files) from Sage Payroll: NI numbers (lifetime identifiers), tax codes, PAYE
history, gross/net pay per period, bank account details for BACS salary payments, pension contributions, P45/P60 records.
Complete financial records for 15 entities Sage 200 databases for Allmand-Smith Ltd, Stormguard Fabrications, Stormguard Sills, Rainwater Systems, Floodplan,
Bridgemill, Chelford, Paradise, MJ Associates, SAS Partners, Specialised Aluminium Supplies, two pension funds, plus the consolidated
age200_AllmandSmithLtd.bak (2.1 GB). Management accounts (JanJul 2024), nominal trial balances, bank reconciliations (102,662 cash at year-end). Revenue:
17.66M, profit: 1.01M, financial health: 12/100 (distressed).
Bethany Press International
October 21, 2026
•[ ransomware, leak, retail ]
Bethany Press International was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-10-21. Sector: Retail & E-Commerce. Bethany Press partners with authors, ministries, and publishers to create, produce, and distrib
ute millions of life-changing Christian books each year. They offer industry-leading publishing
services for both short-run and long-run printing and distribution.
We will upload 40gb of corporate data soon. Employee personal information (financials and so on
), customer information, financials, contracts and agreements, and so on.
SEPIVER
October 22, 2026
•[ ransomware, leak ]
SEPIVER was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-22. Country: Mexico. Website: sepiver.com.mx.
Arthritis Center of Riverside
October 24, 2026
•[ ransomware, healthcare, leak ]
Arthritis Center of Riverside was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-24. Sector: Healthcare. Country: United States of America. Website: thearthritiscenter.com. rheumatology medical practice Riverside, California, United States | Scanned laboratory requisitions of named patients with dates of birth, home addresses and Medicare subscriber details, April through October 2026; Accounts receivable aging with patient names, account numbers, insurers and balances; Patient billing files and records correspondence of the practice | [NOT PAID EXPOSED]