Cooper Tec Solutions
September 29, 2026
•[ ransomware, technology, leak ]
Cooper Tec Solutions was listed as a victim on the leak site of the HYFLOCK ransomware group; the attack is estimated to have taken place on 2026-09-29. Sector: Technology. Country: Brazil. Website: coopertecs.com.br. Cooper Tec Solutions is a Brazilian company that provides industrial heating and combustion system solutions all across Brazil. We got a lot of their data
MyM ODONTOCLINICA S.A
October 14, 2026
•[ ransomware, healthcare, leak ]
MyM ODONTOCLINICA S.A was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Healthcare. Country: Brazil. ompany from Paraguay operating in the field of dentistry.
Financial documents, personal and customer data.
The archive contains the most important documents [Sector: Medical, Other]
japantimes.co.jp
October 14, 2026
•[ ransomware, leak, technology ]
japantimes.co.jp was listed as a victim on the leak site of the Eclipse ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Other. Country: Japan. Website: japantimes.co.jp. [AI generated] The Japan Times is Japan's oldest and largest English-language newspaper, founded in 1897. It operates in the media and publishing industry, providing news, analysis, and commentary on Japanese politics, business, society, and culture to an international audience. Headquartered in Tokyo, Japan, the company publishes both print and digital editions, serving expatriates, diplomats, businesspeople, and readers worldwide interested in Japan-related news.
Interior Technologies
October 14, 2026
•[ ransomware, technology, leak ]
Interior Technologies was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Technology. smart building & surveillance integration (US) California, USA | The complete gateway configuration of a smart building and surveillance integration company: every client site, device, user and credential; Client site surveillance feeds: dark until settlement; Administrator access to the company's own management infrastructure: reset by us | [NOT PAID EXPOSED]
hensley
October 15, 2026
•[ ransomware, leak ]
hensley was listed as a victim on the leak site of the iah6477 ransomware group; the attack is estimated to have taken place on 2026-10-15. Sector: Other. [AI generated] N/A
The name "Hensley" alone is not sufficient to identify a specific company with verifiable details, as multiple businesses operate under this name across different industries and countries (e.g., Hensley Industries, Hensley Beverage Company, Hensley Legal Group, among others). Without additional context such as a location, industry, or full legal name, I cannot provide a reliable, factual profile.
First Brothers Co., Ltd
October 17, 2026
•[ ransomware, leak ]
First Brothers Co., Ltd was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-17. Sector: Other. Country: Thailand. Website: firstbrothers.com.
SMIC US Company (Sunnyvale, CA — US arm of Semiconductor Manufacturing International Corpo...
October 18, 2026
•[ ransomware, leak, manufacturing ]
SMIC US Company (Sunnyvale, CA US arm of Semiconductor Manufacturing International Corpo... was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-18. Sector: Manufacturing. Country: United States of America. Semiconductor manufacturing California, USA | Corporate business records and working files from the company's file servers; Employee and payroll related records; Financial and accounting documents | [NOT PAID EXPOSED]
Merit Financial Group
October 19, 2026
•[ ransomware, finance, leak ]
Merit Financial Group was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-10-19. Sector: Financial Services. Country: United States of America. Merit Financial Group, LLC, doing business as Merit Financial Advisors ("Merit"), is a national wealth management firm that supports both the independent broker-dealer and RIA models. Based in Atlanta, Georgia, Merit has 24 additional offices throughout the U.S. and managed $5.59 billion in assets as of June 30, 2021 ($3.53 billion in advisory, $1.95 billion in brokerage assets and with $112 million in assets under advisement). Merit's mission is to establish and exceed the financial goals of its clients, while also providing its advisors and offices with practice management resources, an industry leading technology platform and the investment expertise needed to drive growth and deliver a superior client experience.
The company headquarters is located in 2400 Lakeview Parkway, Suite 550, Alpharetta, GA 30009, United States.
201-500 Employees
Brüninghoff Group
October 20, 2026
•[ ransomware, manufacturing, leak ]
Brninghoff Group was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-10-20. Sector: Manufacturing. Country: Germany. Brninghoff Group (brueninghoff.de) is a German construction and manufacturing company headquartered in Heiden, founded in 1974. The company specializes in turnkey project development, engineering, and the prefabrication of hybrid timber, concrete, and steel building systems. With around 700 employees, it strongly emphasizes sustainable, energy-efficient building methods for commercial, residential, and public architecture.
Company #95
October 20, 2026
•[ ransomware, energy, leak ]
Company #95 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-20. Country: Switzerland. solar energy company Switzerland | [PENDING EXPOSURE]
COASTAL CAROLINA NEUROPSYCHIATRIC CENTER, PA
October 20, 2026
•[ ransomware, healthcare, leak ]
COASTAL CAROLINA NEUROPSYCHIATRIC CENTER, PA was listed as a victim on the leak site of the Booba Project ransomware group; the attack is estimated to have taken place on 2026-10-20. Sector: Healthcare. Country: United States of America. Website: www.coastalcarolinapsych.com. Medical Practices Stolen data: 10 GB.
novagroupgbc.com
October 21, 2026
•[ ransomware, leak ]
novagroupgbc.com was listed as a victim on the leak site of the BrainCipher ransomware group; the attack is estimated to have taken place on 2026-10-21. Sector: Other. Country: United Kingdom of Great Britain and Northern Ireland. Website: novagroupgbc.com. [AI generated] N/A
I don't have verified, reliable information about a company operating at "novagroupgbc.com." Providing fabricated details about its industry, operations, or country would risk generating inaccurate threat intelligence. If you have additional context (screenshots, registration data, WHOIS records, or business documents related to this domain), please share them and I can help analyze that information instead.
Medienwerkstatt
October 22, 2026
•[ ransomware, leak, education ]
Medienwerkstatt was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-10-22. Sector: Education. Country: Germany. Medienwerkstatt stands for digital and printed communication of the highest quality and disting
uishes itself through an exceptional customer service. With more than 50 passionate talents for
various offline and online disciplines, medienwerkstatt ag is one of the largest media service
providers in the canton of Thurgau.
We will upload 130gb of corporate data soon. Employee personal information (names, addresses, p
hones, contacts and so on), customer information, contracts and agreements, and so on.
Adirondack Networks, Inc.
October 24, 2026
•[ ransomware, leak, technology ]
Adirondack Networks, Inc. was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-24. Sector: Technology. Country: United States of America. network and IT services New York, United States | The live accounting database of the company, more than 627 megabytes, active through 20 October 2026; A second company accounting database of Elevate Networks, Inc., more than 331 megabytes, active through 20 October 2026; Transaction logs and scheduled accounting backups | [NOT PAID EXPOSED]
Ernesto Malvestiti S.p.A.
October 26, 2026
•[ ransomware, manufacturing, espionage ]
Ernesto Malvestiti S.p.A. was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Manufacturing. Country: Italy. Website: Ernesto Malvestiti S.p.A.. [manufacturer] Ernesto Malvestiti S.p.A. a privately-held Italian manufacturer of precision aluminium die-cast and fine-blanked components, supplying BMW, Valeo, BorgWarner, Schneider Electric, Fiat/Stellantis, and 150+ other automotive OEM.
The exposed material spans the company's entire operations:
PAGHENET payroll database (1.1 GB SQL Server backup 7 copies) every employee's salary, IBAN bank account, codice fiscale (Italian tax ID), home address, and tax withholdings. Plus the INAZMST employee master database (181 MB 5).
GDPR Article 9 special-category data medical fitness records, disability status, union membership lists, workplace injuries, occupational diseases, and stress assessments for the entire workforce.
50+ plaintext OEM portal credentials stored in a single file called accesso web.txt BMW B2B, Brose SWP, Valeo, BorgWarner SAP, Schneider VFAST, Eaton, Fiat, Peugeot/PSA, and 40+ more.
SQL Server administrator password for the payroll database server, stored in a plaintext ODBC registry export.
ADP payroll SFTP credentials stored in WinSCP.ini the channel used to transmit employee salary data to the external payroll processor.
614 MB of financial/controlling data consolidated balance sheets (2024-2025), revenue by plant, P&L, transfer pricing documents, cash flow, competitor analysis, and banking relationships.
1.5 GB of engineering IP 300+ fine blanking die designs, technical drawings (483 MB), press parameters, PLC programs, FANUC robot code, and R&D contracts.
160+ client/supplier contracts with pricing, commercial terms, and executed NDAs.
560+ job candidate CVs with full names, addresses, phone numbers, and career histories.
Referans Lab Ref-Lab
October 26, 2026
•[ ransomware, leak, technology ]
Referans Lab Ref-Lab was listed as a victim on the leak site of the Doommageddon ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Technology. Country: Turkey. Status: leaked | Data size: 3.07 GB | Files: 2 files | Deadline: 2026-10-26T00:00:00Z
zzq-test
October 27, 2026
•[ ransomware, leak ]
zzq-test was listed as a victim on the leak site of the ULose ransomware group; the attack is estimated to have taken place on 2026-10-27. Country: c | Status: Sale
Personify Health
October 17, 2026
•[ ransomware, healthcare, leak ]
Personify Health was listed as a victim on the leak site of the Helix ransomware group; the attack is estimated to have taken place on 2026-10-17. Sector: Healthcare. Country: United States of America. Personify Health records. Yearly revenue ~$500 million. GoFile links and passwords unlock in 12 hours.
Solid Trading B.V.
October 18, 2026
•[ ransomware, leak, finance ]
Solid Trading B.V. was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-18. Sector: Other. Country: Netherlands. FX liquidity and trading technology Netherlands | Live client trading records: order and execution data for the banks and institutions trading through this firm, with amounts and account identifiers; The client database: companies, platform users with password hashes, credit limits, clearing paths and fee schedules; FIX venue session configurations, including login credentials for liquidity providers; Trade history and bank matching audit records | [NOT PAID EXPOSED]
All Business Technologies (Fox Hill bookkeeping and tax practice)
October 18, 2026
•[ ransomware, leak, finance ]
All Business Technologies (Fox Hill bookkeeping and tax practice) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-18. Sector: Professional Services. Accounting & Tax Preparation (US) Massachusetts, USA | Books and tax records of a Massachusetts bookkeeping and tax practice: live accounting company files of more than 60 client companies with all accounting backups 2014 through 2026; Per-client tax return data for tax years 2015 through 2025 and the practice billing database; Accounts receivable ledgers, client lists and scanned client legal documents: deeds, trust certifications and IRS powers of attorney | [NOT PAID EXPOSED]
