Adams Warehouse & Delivery, Inc.
October 16, 2026
•[ ransomware, leak, manufacturing ]
Adams Warehouse & Delivery, Inc. was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-10-16. Sector: Transportation. Country: United States of America. Website: Adams Warehouse & Delivery, Inc.. Adams Warehouse & Delivery, Inc. a family-owned freight and logistics company operating 11 warehouse facilities in the Houston metro area since 1976.
The dataset includes complete server backup mirrors from multiple drives (D:, E:, Data, Network Shares), capturing the company's entire digital footprint:
Sage/Peachtree accounting system for 8 entities spanning FY2007FY2025+, containing payroll, AR, AP, general ledger, and W-2 filing histories
5272 Social Security Numbers with full identity packages (name, DOB, address, phone, emergency contacts, health insurance IDs) across 4 entities
Domain administrator passwords saved in 4 RDP files, plus plaintext VPN credentials, WiFi passwords, and 18 database connections with blank passwords
WDS source code the company's custom warehouse distribution management system (VB6/.NET, multiple versions)
20+ years of customer data rate cards, operations logs, and contact lists for 100+ warehouse customers including Honeywell, Hospira, Amway, and Kaiser
Medical clinic employee data South Main Medical Clinic's bookkeeping within the Sage system, including physician SSN
11 Outlook PST email archives (largest: 1.5 GB)
First Dental Health
October 16, 2026
•[ ransomware, healthcare, leak ]
First Dental Health was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-16. Sector: Healthcare. Country: United States of America. Website: firstdentalhealth.com. firstdentalhealth.com First Dental Health, Inc. dental consulting company founded in 1995 and based in Sacramento, California. It is led by Chairman and CEO Michael Zhang together with founder Dr. Rick Kershner, a periodontist who previously worked with Western Dental, Coast Dental and Pacific Dental Services. The company transforms existing dental practices of 40 to 250 chairs through leadership development, culture building and operational excellence, typically raising performance by 40 to 80 percent within 2 to 4 years. Its flagship case is Sacramento Dentistry Group, which grew from around 330000 dollars monthly revenue in 2014 to roughly 640000 dollars by 2023. It also runs a DSO consolidation model that merges 6 to 10 practices under one brand with owners keeping equity and a 3 to 7 year exit path. The team has built 14 companies that made the Inc. 5000 list, positioning it as a small but high-impact operator in US dental business consulting.
verveba.com \ www.att.com
October 15, 2026
•[ ransomware, technology, leak ]
verveba.com \ www.att.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-10-15. Sector: Technology. Country: United States of America. 2tb
Pantanal Agricola
October 14, 2026
•[ ransomware, leak, finance ]
Pantanal Agricola was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Agriculture and Food Production. Country: Brazil. Website: pantanalagricola.com.br. pantanalagricola.com.br Pantanal Agrcola S.A. is a Brazilian agri-input distributor (crop protection, fertilizers, seeds) founded in 2001 in So Gabriel do Oeste, Mato Grosso do Sul 19 legal units, 15-16 stores across MS/MT/GO, ~300 employees, serving 64+ municipalities and 5 million hectares of farmland. Partners include BASF, Corteva, FMC, Sumitomo, ICL, and Brevant; the business model centers on barter (inputs repaid with grain) plus agronomic advisory. The headline event: Bunge signed an MOU in Nov 2021 to acquire a minority stake, adding grain-storage and trading muscle. It finances heavily through agri-receivables certificates (8 CRA/CDCA deals since 2019, ~R$217M+, incl. R$145M in 2025 via Ecoagro and a tokenized CDCA with Banco BV). Corporate governance is professionalizing SA fechada since 2019, board expanded with independents in 2025-26, new CFO Flvio Sales (2025); founder-CEO Jonis Assmann still leads, with second generation (Bruno Franciosi) in management.
Martin LLP
October 13, 2026
•[ ransomware, finance, leak ]
Martin LLP was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-13. Sector: Professional Services. Country: United Kingdom of Great Britain and Northern Ireland. Website: martinllp.net. martinllp.net Martin LLP Martin LLP is a boutique business law firm founded in 1996, with offices in Stamford and New York. It focuses on middle-market companies, private equity sponsors, lenders, and business owners. Core practices: M&A and private equity, banking and finance, commercial litigation, and commercial real estate. The firm positions itself as partner-led, with small teams and senior lawyers doing hands-on work on deals from a few million to several hundred million dollars. Its people come from large national firms like Skadden, Latham & Watkins, Mayer Brown, and Schulte Roth. It publishes actively on M&A topics, notably representation and warranty insurance (RWI). It is recognized in regional rankings such as Best Law Firms 2026 for Corporate Law in Stamford.
BladeTech Inc
October 16, 2026
•[ ransomware, manufacturing, healthcare ]
BladeTech Inc was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-16. Sector: Manufacturing. Country: United States of America. Website: bladetechinc.com. dental laboratory (CAD/CAM manufacturing) Missouri, USA | Patient case designs of a dental laboratory with full patient names, tooth numbers and material/shade codes; CNC milling toolpaths and MillBox production job files for crowns, bridges and templates, September to October 2026 production; The complete 4.4 GB production archive of the lab | [NOT PAID EXPOSED]
Mantum Holding AB
October 13, 2026
•[ ransomware, leak ]
Mantum Holding AB was listed as a victim on the leak site of the Wallstreet ransomware group; the attack is estimated to have taken place on 2026-10-13. Sector: Other. Country: Sweden. A holding company associated with Mantum, a Swedish transport and logistics group serving construction, recycling, and freight sectors
Spectrum Arkitekter AB
October 13, 2026
•[ ransomware, leak, manufacturing ]
Spectrum Arkitekter AB was listed as a victim on the leak site of the Wallstreet ransomware group; the attack is estimated to have taken place on 2026-10-13. Sector: Professional Services. Country: Sweden. Stockholm architecture and interior-design firm, with work including commercial properties, workplaces, hotels, property development, and product design.
Colorado Texas
October 3, 2026
•[ ransomware, leak, energy ]
Colorado Texas was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-10-03. Sector: Energy & Utilities. Country: United States of America.
Trieschmann Dumala Architectural Group
October 14, 2026
•[ ransomware, leak ]
Trieschmann Dumala Architectural Group was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Professional Services. architecture & design (US) Florida, USA | The complete business email archive of the firm's principal: client correspondence, financial records and project communications spanning the firm's history; Working files and project documents from the firm's central storage | [NOT PAID EXPOSED]
FINANCIAMENTO LTDA
October 14, 2026
•[ ransomware, finance, leak ]
FINANCIAMENTO LTDA was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Financial Services. Country: Brazil. H2 Financiamento
h2financiamento.com.br
Total leak: 1.53 TB, 3.619.372 Files, 908.472 Folders
Data: Clients Personal ID/Passport, Driver license, Clients (RG / CIN) CPF (Cadastro de Pessoas Fsicas), Birth certificate, Clients Risk Assessment,
Finance doc's, Bank statements, Tax invoice and a lot of other personal information.
Data type: High Confifential
Partners: Caixa Economica Federal, Construtora Tenda, Cury Construtora, Santander Brasil, Morgan Stanley
The full version of the publication is coming soon.
Taiwan Otsuka Pharmaceutical
October 14, 2026
•[ ransomware, healthcare, leak ]
Taiwan Otsuka Pharmaceutical was listed as a victim on the leak site of the Eclipse ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Healthcare. Country: Taiwan. Website: www.otsuka.com.tw. Taiwan Otsuka Pharmaceutical was founded in 1974, with the philosophy of "pursuing the health and well-being of people worldwide". With the continuous efforts for the expansion and renewal of production equipment, pharmaceutical technology has continuously improved the quality. It has driven Taiwan's pharmaceutical industry to recognize the high-quality infusion containers. Taiwan Otsuka Pharmaceutical Factory was ranked as Grade A by the Department of Health in 1984. It was approved as a GMP pharmaceutical factory by the Department of Health and the Ministry of Economic Affairs of the Executive Yuan in 1986. It was approved as a PIC/S GMP pharmaceutical factory by the Department of Health of the Executive Yuan in 2010, and its products are exported to many countries in Asia, which proves that the quality has reached the high standard. Taiwan Otsuka Pharmaceutical also adheres to the business philosophy of "Otsuka people" and is committed to research and development. We will continue to strive for perfection and make unremitting efforts for the health of the people and the well-being of the society. At the same time, we hope that all sectors of society will continue to give us advice and guidance. We will also adhere to the spirit of "honesty, creativity, and service" to achieve our goals.
Alma Center Servizi Medicali S.r.l.
October 15, 2026
•[ ransomware, healthcare, leak ]
Alma Center Servizi Medicali S.r.l. was listed as a victim on the leak site of the spacebears ransomware group; the attack is estimated to have taken place on 2026-10-15. Sector: Healthcare. Country: Italy. Website: www.almacenter.it. Alma Center is a private multi-specialty diagnostic and outpatient medical center based in Mariglianella (province of Naples, Campania, Italy). Founded in 1984 by Dr. Emanuele Aliperti, it operates as a polispecialistico facility providing a broad range of diagnostic imaging, laboratory, and specialist services under both private and SSN (National Health Service) agreements. https://www.almacenter.it/
ServiceMaster of Ottawa
October 14, 2026
•[ ransomware, leak ]
ServiceMaster of Ottawa was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Professional Services. Country: Canada. Website: svmottawa.ca. svmottawa.ca ServiceMaster of Ottawa Canadian property restoration and commercial cleaning company (legal entity 1351120 Ontario Inc.), a ServiceMaster franchise since 1969 owned since 2006 by John Cooke. HQ at 180 Wescar Lane, Ottawa (Carp/Richmond), ~140 staff, 24/7/365 emergency service across the National Capital Region. Core: water/fire/mold remediation, asbestos removal, reconstruction, odor control, janitorial backed by IICRC techs, HCRA license B62544, Tarion, WSIB+liability, Restore 365/Xactimate. Record: 40,000+ customers served; Cooke won ServiceMaster's "Brand Ambassador of the Year" 2026, "Mid-Market Business of the Year" (Ottawa Chamber, 2008). Reputation mixed (3.84.3/5, 313+ reviews) excellent on small jobs and named techs (Ryan Potestio, Jeff Jerome)
Axle Logistics
October 14, 2026
•[ ransomware, leak, technology ]
Axle Logistics was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Transportation. Country: United States of America. Website: axlelogistics.com. axlelogistics.com Axle Logistics non-asset freight brokerage founded in 2012 in Knoxville, Tennessee, by Drew Johnson and Jon Clay two University of Tennessee grads who started with two people and one trucking software license. It organizes truckload, LTL, intermodal, and port drayage shipments across the US, Canada, and Mexico by matching loads with third-party carriers, focusing on Fortune 500 shippers and mid-market brands. Revenue exploded from $80M (2018) to over $1.2B gross / $159M net (2025), and headcount grew from 2 to roughly 700 making it one of the fastest-scaling brokers in the country. It's landed on the Inc. 5000 list over a decade straight, ranked #52 among Transport Topics' top 50 logistics companies, and won Knoxville Top Workplaces seven years running. The company invested $38M in a gleaming new 84,000 sq ft HQ with state support and pays employees an average of ~$117K/year. It's a brokerage, not a carrier so shipment quality depends on the carriers.
Suhai Segurana Pessoal
October 14, 2026
•[ ransomware, leak ]
Suhai Segurana Pessoal was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Professional Services. Country: Brazil. Website: suhaiseguranca.com.br. suhaiseguranca.com.br Suhai Segurana Pessoal Brazilian personal security company founded in 1992 one of the older, established firms in its niche. Core business: bodyguard/executive protection, family and residential security, security drivers, and corporate guarding, delivered nationwide. Teams are described as vetted, licensed professionals backed by 24/7 monitoring and in-house tactical training. The firm claims ISO 9001 and Great Place to Work certification, but doesn't publish certificates claims are self-reported. No revenue, pricing, or verified headcount is public; everything is custom-quoted per job. Critically: since Brazil's 2024 law, security work is only legal if the firm holds a current federal police permit for that specific service and state confirm yours before hiring. Also beware the unrelated "Suhai" auto insurer sharing the name most complaints you'll find online are about insurance, not this company.
EnVision Eye Care
October 16, 2026
•[ ransomware, leak, healthcare ]
EnVision Eye Care was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-16. Sector: Healthcare. Healthcare - Ophthalmology (US) Mississippi, USA | Patient records of a Mississippi ophthalmology practice: 13,308 patient records with names and dates of birth, taken from the patient database backup of December 2025; The complete patient database backup history of the practice, 2018 through 2025; Patient eye examination records with full ocular, medical and social history; The OCT eye scan archive of the practice | [NOT PAID EXPOSED]
PART2 Global AirFreight International
October 17, 2026
•[ ransomware, leak, technology ]
PART2 Global AirFreight International was listed as a victim on the leak site of the Eclipse ransomware group; the attack is estimated to have taken place on 2026-10-17. Sector: Transportation. Country: Singapore. Website: www.globalair.com.sg. PART 2 Global Airfreight International is a logistics solution provider specializing in air freight, ocean freight, cross-border trucking, and contract logistics. They cater to various industries including aerospace, healthcare, technology, and general cargo, offering services such as temperature-controlled solutions and project cargo management. The company focuses on delivering high standards of service and innovative solutions to meet customer requirements. Their clients include businesses in need of reliable and efficient supply chain solutions for critical shipments.
Milstein Siegel, LLC
October 13, 2026
•[ ransomware, leak ]
Milstein Siegel, LLC was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-13. Sector: Professional Services. Country: United States of America. Website: milsteinfamilylaw.com.
Hunter Neurology
October 13, 2026
•[ ransomware, healthcare, leak ]
Hunter Neurology was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-13. Sector: Healthcare. Healthcare - Neurology (AU) New South Wales, Australia | Patient records of an Australian neurology practice: 15,252 patient images and scans, 11,819 patient letters and reports, 439 laboratory results and 839 patient records system files; Four complete weekly backups of the practice medical records system; Protected health information including patient names, dates of birth and clinical data | [NOT PAID EXPOSED]