mcpolymers.com
September 23, 2026
•[ ransomware, manufacturing, leak ]
mcpolymers.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-09-23. Sector: Manufacturing. Country: United States of America. Website: mcpolymers.com. MCPolymers.com: 27 Years of Corporate Secrets PROLOGUE This article contains only a portion of the d...
Franklin Empire
October 4, 2026
•[ ransomware, leak, technology ]
Franklin Empire was listed as a victim on the leak site of the BYOD ransomware group; the attack is estimated to have taken place on 2026-10-04. Sector: Other. Website: franklinempire.com. You know we have over 700GB of Data, AWS Keys to your buckets, (which we dumped), Moonshot AI API keys, SMTP credentials, Packaging Slips, invoices, PDFs, Business Information, Customer PII, Inventory stash and SO much more. Your team knows how serious the breach is, hence why everything got rotated FAST, you also know how bad it can get if it gets posted in every corner of the dark web, Either reach out to us using the Contact methods listed on our site or face the consequences. Make the right decision, it's only you who can save yourselves. Anyways, you know where to find us (contact tab). We will take you down when communication has been established between our team and yours.
grundens.com
October 5, 2026
•[ ransomware, retail, leak ]
grundens.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-10-05. Sector: Retail & E-Commerce. Country: United States of America. Website: grundens.com. The company's origins can be traced to 1911, when Carl A. Grundn, the son of a fisherman from Grundsund on
Flydubai
October 6, 2026
•[ ransomware, leak ]
Flydubai was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Transportation. Country: United Arab Emirates. [AI generated] Flydubai is a government-owned low-cost airline based in Dubai, United Arab Emirates. Founded in 2008, it operates within the aviation and air transportation industry, providing passenger and cargo flight services across the Middle East, Africa, Asia, and Europe. The airline operates from Dubai International Airport and serves as a budget carrier complementing Emirates, expanding connectivity to underserved and emerging markets globally.
architekt-vondanwitz.de
October 6, 2026
•[ ransomware, leak, manufacturing ]
architekt-vondanwitz.de was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Professional Services. Country: Germany. Website: architekt-vondanwitz.de. Architektur in der Symbiose aus der erfahrenen und sicheren Anwendung der innovativen Bauteilevorfertigung, mit konomischer Umsetzung, ist seitber 40 Jahren unsere Leidenschaft.
Employees: 20
Revenue: $5 Million
Phone Number: 06761/95900
Select Community Management
November 1, 2026
•[ ransomware, leak ]
Select Community Management was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-11-01. Sector: Professional Services. Country: United States of America. Website: www.thecondopros.com.
DPL Group
October 1, 2026
•[ ransomware, retail, leak ]
DPL Group was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-10-01. Sector: Other. DPL Group Ltd. is a supplier of building materials and home improvement products, offering a wi
de range of items including timber sheet materials, heating, plumbing, hand tools, and fixings.
The company also provides doors, floors, stairs, electrical supplies, and decorating materials
.
We will upload 8gb of corporate data soon. Employee personal documents (passports, DLs, medical
information), financials, lots of projects, customer information and so on.
Sangre de Cristo Electric Association
October 1, 2026
•[ ransomware, energy, leak ]
Sangre de Cristo Electric Association was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-10-01. Sector: Energy & Utilities. Country: United States of America. Website: myelectric.coop. Sangre de Cristo Electric Association (SDCEA) has been informed that a substantial volume of sensitive information has been compromised. The affected information includes customer personally identifiable information, financial and payment data, utility account information, and information associated with the organizations energy infrastructure and operational technology environment.
The information includes details concerning electrical distribution infrastructure, substations, transformers, feeders, operational systems, renewable-generation assets, outage information, and SCADA/EMS-related environments. The compromise data also include highly sensitive authentication and security information, including control-system credentials, API keys, and OT security configurations.
We previously proposed resolving the incident through a peaceful and confidential process. According to our account, negotiations were subsequently discontinued after SDCEA CEO Jon Beyer indicated that the organization had decided to end discussions. As a result, we are issuing this public statement concerning the incident.
In addition, we will take further disruptive actions to ensure that, in the future, those responsible for making these decisions approach the security of the resources entrusted to themincluding the people within their area of responsibilitywith greater awareness and seriousness.
PT Indo Tambangraya Megah
September 12, 2026
•[ ransomware, leak, energy ]
PT Indo Tambangraya Megah was listed as a victim on the leak site of the ransomhouse ransomware group; the attack is estimated to have taken place on 2026-09-12. Sector: Energy & Utilities. Country: Indonesia. Website: www.itmg.co.id. PT Indo Tambangraya Megah, founded in 1987, is a leading coal producer based in Asia. The company focuses on maintaining high standards in corporate governance, environmental practices, and workplace safety. PT Indo Tambangraya Megah operates with a commitment to collaboration with local communities and stakeholders. The company has established a diverse customer base in the mining industry and offers various services related to coal production.
The Official Collegeof Architects of León (COAL)
October 3, 2026
•[ ransomware, leak, financial ]
The Official Collegeof Architects of Len (COAL) was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-10-03. Sector: Professional Services. Country: Mexico. The Official College of Architects of Len (COAL) was established on July 12, 1931, encompassi
ng the regions of Len, Asturias, and Galicia. The College of Galicia was legally separated in
1973 and the College of Asturias in 1981.
Here is the access to 77gb of corporate data. Detailed personal information (passports), finan
cials, students and clients information and so on.
Click the download button.
You will find several password-free archives. Click on any of them to start the download.
Andersen Group Inc.
October 8, 2026
•[ ransomware, leak ]
Andersen Group Inc. was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-10-08. Sector: Professional Services. (NYSE: ANDG) reported $217.7 million in revenue for the second quarter of 2026 and $838.7 million in f
Shalom Christian Academy
October 9, 2026
•[ ransomware, education, leak ]
Shalom Christian Academy was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-10-09. Sector: Education. Country: United States of America. Website: shalomca.com. As a school, Shalom Christian Academy is legally and ethically obligated to maintain a wide range of confidential information. However, they are grossly negligent in protecting their own security and that of their students and staff. Consequently, we provide you with student grades, disciplinary and special education records, health and immunization records, financial aid and tuition information, donation history, employee background checks, salary data, and internal security documents. This leak into the public domain constitutes an unacceptable betrayal that can lead to identity theft, financial fraud, extortion, harassment, and devastating harm to children and families. The school is culpable for this act and must be held accountable to the fullest extent of the law.
PIR Sales
October 6, 2026
•[ ransomware, leak, manufacturing ]
PIR Sales was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Other. Country: United States of America. Website: pirsales.com. pirsales.com zoominfo.com/c/pir-sales-inc/84001098 PIR Sales, Inc. is a private, independent manufacturers' representative firm founded in 1992 in Chandler, Arizona, serving plumbing, irrigation, waterworks, fire/life safety, and HVAC markets across Arizona, Southern Nevada, New Mexico, and El Paso TX. It generates estimated annual revenue of $2023M with only ~1719 employees (9 outside + 8 inside sales) an exceptional ~$1.21.35M revenue per employee. The firm represents 40+ premium brands including A.O. Smith, Watts Water Technologies, Bradley Corp., Panasonic HVAC, Stiebel Eltron, and Highland Tank, backed by 25+ year manufacturer relationships and a 27,000 sq ft warehouse offering 24/7 commercial water heater pickup. It serves 20 distribution channels (architects, engineers, contractors, municipalities, utilities) and employs dedicated Specification Consultants for architects in both Arizona and Las Vegas. Led by President Bob Saylor (29 years at PIR) and VP Craig Addington
Glenhardie Country Club
October 10, 2026
•[ ransomware, leak ]
Glenhardie Country Club was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-10. Sector: Hospitality. Country: United States of America. Website: www.glenhardiecc.com.
April Asia (port agency operations)
October 12, 2026
•[ ransomware, leak ]
April Asia (port agency operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: Indonesia. Port agency / logistics Indonesia | Container gate movement and damage management records | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
Samudera (coastal shipping operations)
October 12, 2026
•[ ransomware, leak ]
Samudera (coastal shipping operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: Indonesia. Coastal shipping Indonesia | Charter party records and dangerous-goods operational documentation | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
GCS Kuwait (port community system operations)
October 12, 2026
•[ ransomware, leak, technology ]
GCS Kuwait (port community system operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: Kuwait. Port community IT Kuwait | Container movement records and operational EDI archives | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
BNCT Busan New Container Terminal
October 12, 2026
•[ ransomware, leak ]
BNCT Busan New Container Terminal was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: South Korea. Port terminal operations South Korea | Operational EDI archives and internal database scripts | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
Tsuneishi / Kambara Kisen (shipbuilding and ship management)
October 12, 2026
•[ ransomware, manufacturing, leak ]
Tsuneishi / Kambara Kisen (shipbuilding and ship management) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Manufacturing. Country: Japan. Shipbuilding / ship management Japan | Operational EDI archives and commercial contract records | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
Portonave (container terminal operations)
October 12, 2026
•[ ransomware, leak, manufacturing ]
Portonave (container terminal operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: Brazil. Port terminal operations Brazil | Terminal operating system database material and operational EDI archives | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]