DeWalch Technologies, Inc
February 18, 2026
•[ ransomware, technology, manufacturing ]
DeWalch Technologies, Inc was listed as a victim on the leak site of the nitrogen ransomware group; the attack is estimated to have taken place on 2026-02-18. Sector: Technology. Country: United States of America. Website: www.dewalch.com. DeWalch Technologies, Inc. is a vertically integrated engineering and manufacturing company with operations in four key verticals: security, energy, manufacturing, and digital.
Elgon Cosmetic
January 20, 2026
•[ ransomware, retail, manufacturing ]
Elgon Cosmetic was listed as a victim on the leak site of the spacebears ransomware group; the attack is estimated to have taken place on 2026-01-20. Sector: Retail & E-Commerce. Country: Italy. Website: elgoncosmetic.com. Elgon Cosmetic- was founded in 1970 in Italy. Since then, it has established itself as a leading manufacturer of professional hair care products, offering innovative and high-quality solutions for salons worldwide. Today, the brand continues to grow, constantly improving its products and staying aligned with the latest trends in the beauty industry.-- Company financial reports- Medical records- Personal user data- Product formulas- Customer data https://elgoncosmetic.com
O.Berk
February 18, 2026
•[ ransomware, manufacturing ]
O.Berk was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-02-18. Sector: Manufacturing. Country: United States of America. Website: www.oberk.com.
American Piping & Boiler Co
February 14, 2026
•[ ransomware, manufacturing ]
American Piping & Boiler Co was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-02-14. Sector: Manufacturing. Country: United States of America. Website: www.apbconstructiongroup.org.
Park Printing
February 19, 2026
•[ ransomware, manufacturing ]
Park Printing was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-02-19. Sector: Manufacturing. Country: United States of America. Website: www.parkprint.com.
Valgo SA
February 19, 2026
•[ ransomware, technology, manufacturing ]
Valgo SA was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-02-19. Sector: Professional Services. Country: France. Website: valgo.com. VALGO SAS
72 Rue Aristide Briand, 76650 Petit-Couronne, France
valgo.com
VALGO is a French company that specializes in environmental services, particularly in the areas of asbestos removal, soil decontamination, and the revitalization of polluted industrial sites.
Established in 2004, VALGO has developed a strong reputation for its expertise in managing contaminated sites and providing innovative solutions for environmental remediation.
VALGO operates a national network of 17 branches and has an international presence, allowing it to address diverse environmental challenges across different regions.
Total data in the leak: 279 GB (225,372 Files, 50,902 Folders)
Leaked data:
- Clients: Renault Group, Sectra,Evarisk, EPF Reunion,Rousselet and many others famous companies
- Data Classification: confidential, Private/Proprietary
- Special data: Complete information on projects in countries of operation: contracts, NDAs, correspondence with clients,
information about manufacturers of the equipment used and the chemical elements employed, labaratory reserch, hazard information, corporate information, and much more.
- Financial data: invoicing and payment records, financial planning documents, accounting, and customer information and VERY IMPORTANT information!
Willow Construction
February 19, 2026
•[ ransomware, manufacturing ]
Willow Construction was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-02-19. Sector: Manufacturing. Country: United States of America. Website: www.willowconstruction.com.
Kensington HPP
February 19, 2026
•[ ransomware, manufacturing ]
Kensington HPP was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-02-19. Sector: Manufacturing. Country: United States of America. Website: www.kensingtonhpp.com.
Fico Ferragens Indústria e Comércio Ltda
February 7, 2026
•[ ransomware, manufacturing ]
Fico Ferragens Indstria e Comrcio Ltda was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-02-07. Sector: Manufacturing. Country: Brazil. Website: www.ficoferragens.com.br/fico/portugues/home.
Tropic Tool & Mold
February 10, 2026
•[ ransomware, manufacturing, hack ]
Tropic Tool & Mold was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-02-10. Sector: Manufacturing. Country: United States of America. Website: www.tropictoolandmold.com. United States
Paisley Products of Canada
February 13, 2026
•[ ransomware, manufacturing ]
Paisley Products of Canada was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-02-13. Sector: Manufacturing. Country: Canada. Website: www.paisley.ca. Canada
Marwood
September 17, 2025
•[ ransomware, manufacturing ]
Marwood was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2025-09-17. Sector: Manufacturing. Country: United States of America. Website: www.marwoodltd.com. United States
Electriduct
February 19, 2026
•[ ransomware, manufacturing ]
Electriduct was listed as a victim on the leak site of the sinobi ransomware group; the attack is estimated to have taken place on 2026-02-19. Sector: Manufacturing. Country: United States of America. Website: www.electriduct.com. Electriduct specializes in cable management solutions, offering a wide range of products including cable protectors, wire management tools, and power distribution equipment. Their extensive catalog features items such as braided sleeving, cable carriers, and traffic safety products, catering to both indoor and outdoor applications. The company targets professionals in various industries who require reliable and efficient cable management solutions. Electriduct is committed to providing high-quality products at competitive prices, with a focus on customer satisfaction and expert support.
Graymatter
February 19, 2026
•[ ransomware, technology, retail ]
Graymatter was listed as a victim on the leak site of the sinobi ransomware group; the attack is estimated to have taken place on 2026-02-19. Sector: Technology. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.graymatter.com. GrayMatter (graymatter.co.in) is a Bangalore-based IT company founded in 2006, specializing in data analytics, AI, and Business Intelligence (BI) with a strong focus on the airport, retail, and manufacturing sectors. Their flagship products, including Skateboard and StoreSense, deliver specialized, AI-driven insights for improved passenger experience, retail revenue, and parking management.
ABAR S.p.A.
February 20, 2026
•[ ransomware, manufacturing ]
ABAR S.p.A. was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-02-20. Sector: Manufacturing. Country: Italy. Website: www.abarspa.com.
polymedicure.com
February 20, 2026
•[ ransomware, healthcare, manufacturing ]
polymedicure.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-02-20. Sector: Healthcare. Country: India. Website: polymedicure.com. Polymed is a global leader in the medical device industry, offering a wide range of medical devices since 1997. The company specializes in various fields including infusion therapy, critical care, dialysis, cardiology, and oncology
Fabcon
January 24, 2026
•[ ransomware, manufacturing, leak ]
Fabcon was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-01-24. Sector: Manufacturing. Country: United States of America. Website: fabconprecast.com. Fabcon manufactures and erects precast concrete wall panels for e
very type of structure. Projects range from a 10,000 square-foot
machine shop to a one-million square foot distribution center, an
d from a single-story bakery to a 16-story housing facility.
We will upload almost 190gb of corporate data soon. Client inform
ation, employee personal documents (passports, SSNs, DLs and so o
n), detailed financials, projects (confidential files), NDAs, etc
. Kerkstra Precast company data will be disclosed as well.
Stera Chemicals
February 17, 2026
•[ ransomware, manufacturing ]
Stera Chemicals was listed as a victim on the leak site of the lynx ransomware group; the attack is estimated to have taken place on 2026-02-17. Sector: Manufacturing. Country: Romania. Website: www.sterachemicals.com. Stera Chemicals is a leading distributor of raw chemical materials in Romania, serving various industries including cosmetics, detergents, paints, food, plastics, rubber, and construction. Established in 2009, the company is a member of the European Chemical Distribution Industry and offers additional services such as product division, filling, consultation, and product development. They focus on optimizing production processes for their clients and can adapt and deliver chemicals in various quantities.
Altalingua
February 10, 2026
•[ ransomware, manufacturing, automotive ]
Altalingua was listed as a victim on the leak site of the lynx ransomware group; the attack is estimated to have taken place on 2026-02-10. Sector: Professional Services. Country: Spain. Website: www.altalingua.com. Altalingua specializes in multilingual technical documentation, primarily serving the automotive and mechanical engineering sectors. The company is recognized as a leader in the language service provider (LSP) industry, ranking number 1 in revenue from manufacturing. Their services are designed to enhance sales communication and brand loyalty for clients in these sectors. With a commitment to high-quality, efficient, and cost-effective translation services, altalingua is dedicated to meeting the specific needs of its clients.altalingua specializes in multilingual technical documentation, primarily serving the automotive and mechanical engineering sectors. The company is recognized as a leader in the language service provider (LSP) industry, ranking number 1 in revenue from manufacturing. Their services are designed to enhance sales communication and brand loyalty for clients in these sectors. With a commitment to high-quality, efficient, and cost-effective translation services, altalingua is dedicated to meeting the specific needs of its clients.
Esperance Metaland
February 21, 2026
•[ ransomware, manufacturing, leak ]
Esperance Metaland was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-02-21. Sector: Manufacturing. Country: Australia. Website: espmetaland.com.au.
