brookslawfirm.com
October 12, 2026
•[ ransomware, leak, healthcare ]
brookslawfirm.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Professional Services. Country: United States of America. Website: brookslawfirm.com. personal data 8200 client hippa etc
Rechtsanwaltskanzlei Dr. Bien
October 12, 2026
•[ ransomware, leak, finance ]
Rechtsanwaltskanzlei Dr. Bien was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Professional Services. Country: Germany. Website: Rechtsanwaltskanzlei Dr. Bien. [law] Rechtsanwaltskanzlei Dr. Bien a specialist insolvency law firm in Hamm, NRW, appointed as insolvency administrator by 12 Amtsgerichte across Westfalen.
The exposed material includes:
2,387 WinSolvenz case databases each a Microsoft Access MDB containing the complete financial dossier of an insolvency debtor: creditor lists, claim amounts, distribution plans, asset inventories, court appointments, and bank account details.
492+ forced administration (Zwangsverwaltung) case files property addresses, tenant data, rent records, utility accounts, insurance details, court-directed property management reports.
80 GB MailStore email archive the firm's complete email history in MailStoreContainer-v1 format: attorney-client communications, court correspondence, creditor negotiations, debtor disclosures.
1.7 GB beA backup (besonderes elektronisches Anwaltspostfach) three MSSQL database backups containing every electronic communication between the firm and every German court.
35 employee records 25 former + ~10 current staff: contracts, salary, overtime, vacation, pension, disability status, termination agreements.
DATEV tax/accounting archives 33 directories of income tax backups, insolvency accounting, third-party mandates.
Lumabuilt
July 8, 2026
•[ ransomware, manufacturing, leak ]
Lumabuilt was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-07-08. Sector: Manufacturing. Country: United States of America. Website: lumabuilt.com. [AI generated] N/A
I don't have reliable, verified information about a company called "Lumabuilt." Rather than provide potentially fabricated details about its industry, operations, or country, I'm flagging this as unknown. If you have additional context (website, location, sector) or if this is a fictional/test entity, please share details and I can help frame a description accordingly.
TheraCare
October 6, 2026
•[ ransomware, healthcare, leak ]
TheraCare was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Healthcare. Country: United States of America. TheraCare is a multi-service healthcare, rehabilitation, developmental, and educational organization founded in 1991 and headquartered in New York. The company provides clinical and educational services for children, families, and clients of different ages across New York, New Jersey, Connecticut, and Maryland. Its key services include early intervention, autism services, preschool and school-age programs, speech-language therapy, occupational therapy, physical therapy, special education, behavioral services, and school district staffing. TheraCare focuses on helping children reach their developmental and educational potential through individualized clinical and educational programs. The organization emphasizes quality assurance, continuous improvement, regulatory compliance, and measurable service outcomes.
The company headquarters is located in 1133 Westchester Avenue, Suite N-230, White Plains, NY 10604, United States. 201-500 Employees
SOCOCO
October 8, 2026
•[ ransomware, technology, leak ]
SOCOCO was listed as a victim on the leak site of the UmBra ransomware group; the attack is estimated to have taken place on 2026-10-08. Sector: Technology. Country: Brazil. SOCOCO A Brazilian mid-sized food company with 40 employees, blending tradition and modern marketing through WordPress-driven platforms.
Sociedad Portuaria Mardique S.A.
July 3, 2026
•[ ransomware, leak ]
Sociedad Portuaria Mardique S.A. was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-07-03. Sector: Transportation. Country: Colombia. Website: spmardique.com.
Design Electric
October 9, 2026
•[ ransomware, manufacturing, leak ]
Design Electric was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-10-09. Sector: Manufacturing. Design Electric is a company specializing in industrial, government & transportation electrical
in St. Cloud, MN.
We will upload 15gb of corporate data soon. Detailed employee information (passports, DLs of mo
re than 100 employees, about 350 SSN numbers, addresses, phones and so on), projects, lots of c
ontacts, client info, NDA and so on.
AETHOS
October 9, 2026
•[ ransomware, leak, technology ]
AETHOS was listed as a victim on the leak site of the arcusmedia ransomware group; the attack is estimated to have taken place on 2026-10-09. Country: Brazil. Website: aethosconsultoria.com.br. Aethos Sistemas offers a comprehensive suite of software solutions designed to streamline Deadline: 2026-10-16 12:44:00.000000
northshoresun.timesreview.com
September 17, 2026
•[ ransomware, leak ]
northshoresun.timesreview.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-09-17. Sector: Other. Country: United States of America. Website: northshoresun.timesreview.com. FAMILY NEWSPAPER The company that spent twenty years telling Long Island readers about their communi...
Louis Fusco
October 12, 2026
•[ ransomware, leak, technology ]
Louis Fusco was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-10-12. Louis Fusco Landscape Architects is a full-service landscape architectural design firm led by p
rincipal Louis Fusco. The firm is recognized for its site-sensitive creative designs and meticu
lous attention to detail, resulting in award-winning projects featured in landscape journals.
We will upload 465gb of corporate data soon. Employee information (passport and DLs scans and s
o on), projects (drawings, specifications), clients and partners info, lots of agreements and s
o on.
Nam Dinh Vu Port (container terminal operations)
October 12, 2026
•[ ransomware, leak, manufacturing ]
Nam Dinh Vu Port (container terminal operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: Vietnam. Port terminal operations / maritime logistics Vietnam | The full EDI message archive of the terminal's operations server: vessel schedules, container manifests (BAPLIE), gate movement records (CODECO), booking messages (COPARN) covering multiple international shipping lines; Internal system configuration files of the operations server | [NOT PAID EXPOSED: files publish 2026-10-19 13:19 UTC]
NCT Kandla (container terminal operations)
October 12, 2026
•[ ransomware, leak ]
NCT Kandla (container terminal operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: India. Port terminal operations India | Operational EDI correspondence and internal systems logs | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
HPC Hamburg Port Consulting (port operations)
October 12, 2026
•[ ransomware, leak, manufacturing ]
HPC Hamburg Port Consulting (port operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: Germany. Port consulting / terminal operations Germany | Operational EDI archives and cargo/bill-of-lading records | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
Premier Alliance (shipping network operations)
October 12, 2026
•[ ransomware, leak, transportation ]
Premier Alliance (shipping network operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: Netherlands. Shipping / terminal services Netherlands | Terminal network documentation and operational EDI archives | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
GlobalNet LCL (port agency operations)
October 12, 2026
•[ ransomware, leak ]
GlobalNet LCL (port agency operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: Indonesia. Port agency / logistics Indonesia | Container gate movement and damage management records | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
The Buckner Company, Inc.
October 13, 2026
•[ ransomware, leak, finance ]
The Buckner Company, Inc. was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-10-13. Sector: Other. Country: United States of America. Website: The Buckner Company, Inc.. [insurance] The Buckner Company, Inc. is a commercial property & casualty insurance brokerage headquartered in Salt Lake City, Utah, with a second office in Denver, Colorado.
The exfiltrated dataset includes:
1,500+ plaintext credentials Chrome, Edge, and Google password exports from 8+ employees, plus 20+ password spreadsheets. Verified: kbennetts file alone contains 503 entries covering Hartford, Travelers, Chubb, Progressive, Sedgwick, mortgage portals, banking, and personal accounts.
Employee SSNs for 150250 individuals W-2 reports across three entities (TBC, TBI, COL) spanning four tax years (20192022), plus 2023 W-2 and 1099-NEC reports.
316 individual Total Compensation PDFs and 3+ years of Paycom payroll rate history every employees salary, bonus, and benefits laid bare.
A complete M&A acquisition pipeline 60+ prospect folders with due diligence, LOIs, valuations, and the full BroadStreet Partners closing package (52 exhibits including Disclosure Schedules, MIPA, corporate structure documents).
128 Outlook PST email archives spanning years of business correspondence.
Corporate tax returns for Buckner (20042024), Citrus Insurance LLC (20212023), and Consolidated Agencies (20222023).
7 named individuals driver license scans and the Applied Epic insurance management database (Epic.mdf).
PG Group (Pure Options)
October 13, 2026
•[ ransomware, finance, retail ]
PG Group (Pure Options) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-13. Sector: Financial Services. cannabis operator (US) Lansing, Michigan, USA | Complete directory database of a Michigan cannabis operator: password data for all 577 accounts; Working password corpus for dozens of staff and administrator accounts; Financial and contract backups: payroll reports, general ledgers, signed operating and lease agreements; Complete inventory of the shared data volume | [NOT PAID EXPOSED]
Excess Baggage
October 5, 2026
•[ ransomware, leak ]
Excess Baggage was listed as a victim on the leak site of the ransomhouse ransomware group; the attack is estimated to have taken place on 2026-10-05. Sector: Transportation. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.excess-baggage.com. Baggage Express is a dynamic national and international excess baggage shipping company with a heritage stretching back some 25 years. We're dedicated to the task of moving the holdalls, cartons, computers, bikes, luggage and material lives of students, backpackers, expats and anyone else who has found themselves in the UK needing their belongings sent elsewhere. Flexibility is the key to the company's success, tailoring the company's baggage shipping services to the specific individual needs of the company's customers.
Watermark Retirement Communities
August 24, 2026
•[ ransomware, healthcare, leak ]
Watermark Retirement Communities was listed as a victim on the leak site of the payoutsking ransomware group; the attack is estimated to have taken place on 2026-08-24. Sector: Healthcare. Country: United States of America. Website: watermarkcommunities.com. [AI generated] Watermark Retirement Communities is a U.S.-based senior living company that develops, manages, and operates retirement communities offering independent living, assisted living, memory care, and skilled nursing services. Headquartered in Tucson, Arizona, it operates numerous communities across the United States. The company belongs to the senior care and hospitality-adjacent real estate industry, focusing on resident-centered lifestyle programming and care.
Palma
October 6, 2026
•[ ransomware, manufacturing, leak ]
Palma was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Other. Country: United States of America. Website: palmainc.com. palmainc.com zoominfo.com/c/palma-inc/344828237 Palma, Inc. is a private, family-owned epoxy flooring manufacturer and installer founded in 1927 in Whippany, New Jersey now in its third generation (CEO Fred Palma III). It generates estimated annual revenue of $2542M with only ~1015 direct employees (heavy use of subcontractors), completing millions of square feet of industrial flooring over 99 years. The company is a rare single-source formulator/applicator it develops its own products (PalmaLite, PaliKrete, PaliFlake) and installs them, with every square meter personally approved by a family member. Its average project size is $15.3M (Procore data: 122 projects, 76 active simultaneously), serving auto dealerships, jails, hospitals, chemical plants, and government facilities across the U.S. and Canada. Key differentiators: 5-year industry-leading warranty, no membrane required (3040% cost savings), and full ASTM C722-89 compliance. The company's name "A Palma, Manton, Palma Co
