The Law Office of James R Walsh
October 6, 2026
•[ ransomware, leak ]
The Law Office of James R Walsh was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Professional Services. Country: United States of America. Website: jrwalshlaw.com. jrwalshlaw.com The Law Office of James R. Walsh is a small plaintiff-side law firm in Lynnwood, WA (north of Seattle), specializing in workers' compensation (L&I claims), personal injury, maritime, and Social Security cases. Founder James R. Walsh (admitted 1981) has practiced for 44+ years and was named to "Top Attorneys of North America 2015-16." The firm fights for injured workers against Washington's Dept. of Labor & Industries and self-insured employers, with published precedents including Elliott v. L&I (2009) and ITT Rayonier v. Dalman (1992). It acts as a talent incubator attorney Joshua L. Hughes (UW Law, JD with honors) rose from paralegal (2017) to attorney (2022), following the path of earlier associates.
Smart Value
October 6, 2026
•[ ransomware, retail, leak ]
Smart Value was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Retail & E-Commerce. Country: Belize. Website: smartvalue.biz. smartvalue.biz zoominfo.com/c/smart-value/408286294 Smart Value Limited is an Indian MLM (multi-level marketing) / network marketing company founded in 20032004 in New Delhi by Manoj Kumar Gupta, operating 100+ offices across India with a claimed 2,000,000+ distributors (IBAs). The company sells health supplements, personal care, household products, and educational courses but revenue is not publicly disclosed (private MLM). Its core business model relies on recruiting new distributors rather than actual retail sales, with heavily inflated product pricing (200500% above market) to fund multi-level commissions. The company faces serious and widespread allegations: consumer complaints about pyramid-like structure, inability to recover investments, fake income claims on social media, and reported law enforcement scrutiny in India. ~99% of participants lose money (standard MLM economics), while only top recruitment leaders profit. Despite 20+ years of operation and membership in Indian
astranahealth.com
October 9, 2026
•[ ransomware, healthcare, technology ]
astranahealth.com was listed as a victim on the leak site of the chaos ransomware group; the attack is estimated to have taken place on 2026-10-09. Sector: Healthcare. Country: United States of America. Website: astranahealth.com. The company's management decided to pull out of the deal with us in order to save money. The data and diagnoses of millions of patients have been published in their entirety. The total data volume is 1,500 GB.
Astrana Health, Inc. is a physician-centric, technology-powered healthcare company headqu
KP Industries
July 23, 2026
•[ ransomware, manufacturing, leak ]
KP Industries was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-07-23. Country: United Kingdom of Great Britain and Northern Ireland. Website: kp-i.co.uk. [AI generated] N/A
I don't have verified, reliable information about a specific company named "KP Industries." This is a generic-sounding business name that could refer to multiple unrelated companies across different industries and countries, and I cannot confirm details for any specific entity without risking inaccurate or fabricated information.
Camellia Line (ferry and RoRo operations)
October 12, 2026
•[ ransomware, leak ]
Camellia Line (ferry and RoRo operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: Japan. Ferry / RoRo shipping Japan | Freight settlement and payment records | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
EUSU Logistics (logistics operations)
October 12, 2026
•[ ransomware, leak, manufacturing ]
EUSU Logistics (logistics operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: South Korea. Logistics South Korea | Internal infrastructure configuration and assessment records | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
Saehan Marine (ship agency operations)
October 12, 2026
•[ ransomware, leak, financial ]
Saehan Marine (ship agency operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: South Korea. Ship agency South Korea | Port disbursement account records and banking correspondence templates | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
TTI Algeciras (container terminal operations)
October 12, 2026
•[ ransomware, leak, technology ]
TTI Algeciras (container terminal operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: Spain. Port terminal operations Spain | Operational EDI message archives and internal terminal systems documentation | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
Asyaport (container terminal operations)
October 12, 2026
•[ ransomware, leak, manufacturing ]
Asyaport (container terminal operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: Turkey. Port terminal operations Turkey | Dangerous-goods operational records and internal database scripts | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
Claire's Inc.
October 12, 2026
•[ ransomware, retail, leak ]
Claire's Inc. was listed as a victim on the leak site of the Dark Project ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Retail & E-Commerce. Country: United States of America. Website: www.claires.com. About Claire's Inc. Claire's Inc. is a jewelry and accessories retailer aimed at tweens and teens, known for its ear-piercing services and mall-based stores. The company has filed for bankruptcy twice and closed many locations in recent years. It now operates through remaining stores and partnerships with retailers such as Walmart and CVS. Claire's Inc. suffered a cyberattack that disrupted its operations and compromised customers and employees data.
Sangre de Cristo Arts and Conference Center
July 20, 2026
•[ ransomware, leak ]
Sangre de Cristo Arts and Conference Center was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-07-20. Sector: Hospitality. Country: United States of America. Website: sdc-arts.org. [AI generated] Sangre de Cristo Arts and Conference Center is a nonprofit cultural organization located in Pueblo, Colorado, United States. It operates as a multidisciplinary arts facility featuring art galleries, a children's museum, performing arts theaters, and conference and event spaces. The center hosts exhibitions, live performances, educational programs, and community events, serving the arts, culture, and entertainment industry in the southern Colorado region.
Mäntelhaus Kaiser GmbH & Co. KG
July 21, 2026
•[ ransomware, manufacturing, leak ]
Mntelhaus Kaiser GmbH & Co. KG was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-07-21. Sector: Manufacturing. Country: Germany. Website: maentelhaus-kaiser.de. [AI generated] N/A
I don't have reliable, verifiable information about a company called "Mntelhaus Kaiser GmbH & Co. KG" in my knowledge base. Rather than provide fabricated details about its operations, industry specifics, or founding history, I'm flagging this as unverifiable. If you have source material or context about this company, please share it and I can help analyze or summarize that information instead.
hsc.mb.ca
October 10, 2026
•[ ransomware, healthcare, leak ]
hsc.mb.ca was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-10-10. Sector: Healthcare. Country: Canada. Website: hsc.mb.ca. The Health Sciences Centre in Winnipeg, one of the largest medical institutions, was targeted by us that resulted in the largest data breach among healthcare institutions. Our group chose not to completely disrupt the facilitys operations, recognizing the potentially devastating consequences that such an action could have had on patients lives and health.
Nevertheless, Health Sciences Centre management stated that no sensitive data had been affected, despite having been informed otherwise.
The data included, but was not limited to, the following information:
Patient medical records:
Full name, date of birth, address and phone number
Hospital medical record number
Diagnoses, medical history, allergies and medications
Laboratory results, imaging reports
Appointment dates, treatment details and physician information.
Employee and healthcare professional information:
Names, contact details, dates of birth and employee numbers
Employment, payroll and banking information
Professional credentials, work schedules and departmental assignments.
Financial and insurance information:
Billing records and payment histories
Insurance or benefits claim information.
Confidential hospital documents:
Internal emails and staff communications
System configurations, network diagrams and security procedures
Database backups and exported spreadsheets.
We would have very much preferred to avoid making this data breach public, but the management has left us with no other choice.
Eurogate Tanger (container terminal operations)
October 12, 2026
•[ ransomware, leak, technology ]
Eurogate Tanger (container terminal operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: Morocco. Port terminal operations Morocco | Terminal commercial operation configuration records and systems release documentation | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
BMT IQ (marine surveying and inspection)
October 12, 2026
•[ ransomware, leak, manufacturing ]
BMT IQ (marine surveying and inspection) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: United Kingdom of Great Britain and Northern Ireland. Marine surveying United Kingdom | Commercial e-invoice records and equipment interchange receipts | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
ZPMC (port machinery and terminal engineering)
October 12, 2026
•[ ransomware, leak, manufacturing ]
ZPMC (port machinery and terminal engineering) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Manufacturing. Country: China. Port machinery / engineering China | Operational EDI archives and cargo loading records | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
Concord Eye Center
October 12, 2026
•[ ransomware, healthcare, leak ]
Concord Eye Center was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Healthcare. Country: United States of America. Website: http:www.concordeyecenternh.com. A private ophthalmology clinic specializing in various fields. However, it completely fails to ensure the security of itself and its clients and is extremely lax in its recordkeeping. The structure of its confidential records is determined by the categories of protected health information (PHI) it creates and stores. Because Concord Eye Center makes no attempt to regulate security, we provide you with the following information: patient identification and administrative data: this includes names, addresses, dates of birth, social security numbers, and contact information; clinical and medical history: detailed symptom records, ophthalmological and systemic medical history, and family history; diagnostic and lab results; surgical and treatment documentation; billing and financial information: insurance information, claims data, and payment records. Leaking these documents would primarily violate the HIPAA Privacy and Security Rules (45 CFR Parts 160 and 164) and the HITECH Act, which provide for tiered civil penalties for each category of violation, leading to distrust of their business by customers and partners and its collapse.
The Innovation Group
October 13, 2026
•[ ransomware, leak ]
The Innovation Group was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-10-13. Sector: Other. Country: United States of America. Website: www.theinnovationgroup.com. United States
victim
October 13, 2026
•[ ransomware, leak ]
victim was listed as a victim on the leak site of the sarcoma ransomware group; the attack is estimated to have taken place on 2026-10-13. victimGeo: USA - Leak size: 1.2 TB - Contains: files.dump pst
KVH
October 13, 2026
•[ ransomware, technology, leak ]
KVH was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-10-13. Sector: Technology. Country: United States of America. [AI generated] KVH Industries is a U.S.-based company headquartered in Middletown, Rhode Island, operating in the satellite communications and connectivity industry. It provides mobile connectivity services, including satellite TV, internet, and VSAT solutions, primarily serving maritime, leisure marine, and land mobile markets worldwide. KVH also develops navigation and stabilization products such as fiber optic gyros used in defense and commercial applications.