Union Tractor
June 22, 2026
•[ ransomware, manufacturing, retail ]
Union Tractor was listed as a victim on the leak site of the cmdorganization ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Agriculture and Food Production. Country: United States of America. Website: www.uniontractor.com. Union Tractor Ltd. is an independent business selling aftermarket parts and accessories for construction and transportation equipment. It engages in the distribution of undercarriage components, ground engaging tools, engine and drive train parts, hydraulic system parts, exchange compoUnion Tractor Ltd. is an independent business selling aftermarket parts and accessories for construction and transportation equipment. It engages in the distribution of undercarriage components, ground engaging tools, engine and drive train parts, hydraulic system parts, exchange components, and used parts. The company was founded in 1927 and is headquartered in Nisku, Canada.nents, and used parts. The company was founded in 1927 and is headquartered in Nisku, Canada.
mihana-v.com
June 20, 2026
•[ ransomware, manufacturing, technology ]
mihana-v.com was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-06-20. Country: Russian Federation. Website: mihana-v.com. Here is the comprehensive corporate overview of MIHANA Seisakusho Co., Ltd. based on their official company profiles, technical catalogs, and industrial registries
Aerospace & Advanced Composites GmbH
June 22, 2026
•[ ransomware, manufacturing, technology ]
Aerospace & Advanced Composites GmbH was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Manufacturing. Country: Germany. *** (AAC) an Austrian space-materials R&D company headquartered in Wiener Neustadt, with deep ties to the European Space Agency.
Obtained two complete NAS snapshots spanning 30+ years of operations:
aacdata (31 December 2022) 123 GB: the complete Testhouse, R&D, and engineering share, including the ESA thermal vacuum test archive, polymer composites formulations, and 22 Outlook PST email backups.
aacdata1 (14 January 2025) 86 GB: the administrative share, including managing director's full PC backup (browser credentials, passport scans), 15 years of financial statements, shareholder agreements, and the IT credentials master spreadsheet.
BMD_DATA 34 MB: the complete BMD business software accounting database with employee payroll, SEPA payments, and VAT declarations.
done/ Bitlocker recovery keys for 12 endpoints and WMI system dumps.
The exposed material includes:
4 passport scans, 1 social security number, 25 employees' complete HR files, 50100+ job applicant CVs the full identity-theft toolkit for the workforce plus third-party data subjects.
The IT credentials master spreadsheet (AAC CODES.xlsx) containing every system password, plus browser-stored logins for ESA SSO, the company's IT provider, and industrial suppliers.
12 Bitlocker recovery keys enabling full-disk decryption of 6 company laptops.
123 GB of ESA thermal vacuum test data 30+ years of space-grade materials testing that represents the company's core competitive advantage and cannot be recreated.
137 executed NDAs with partners including Airbus, RUAG, Safran, Thales, ESA, BMW, Tesla, Google, Samsung SDI, CERN, DLR, and 126 others.
15 years of annual financial statements, bank records, insurance policies, and shareholder agreements the company's entire financial anatomy laid bare.
graymont.com
June 22, 2026
•[ ransomware, manufacturing, financial ]
graymont.com was listed as a victim on the leak site of the chaos ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Manufacturing. Country: Canada. Website: graymont.com. NOTICE: Graymont Final Warning
We have successfully gained full access to the corporate infrastructure of Graymont. Our team currently holds a massive volume of highly sensitive data. The scope of our access covers the entire core of your operations, from executive financial strategy to individ
ehg.bayern
June 22, 2026
•[ ransomware, manufacturing ]
ehg.bayern was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Other. Country: Germany. Website: ehg.bayern. Founded in 1991, the company has evolved from a regional waste management enterprise into a specialized provider of infrastructure operations,
FTL-Fast Transit Line
June 23, 2026
•[ ransomware, leak, manufacturing ]
FTL-Fast Transit Line was listed as a victim on the leak site of the nova ransomware group; the attack is estimated to have taken place on 2026-06-23. Sector: Transportation. Country: Belgium. Website: ftl.be. FTL International N.V. specializes in shipping, consolidation, forwarding, and groupage services, with a strong presence in major Northern European ports and an office in Colombo, Sri Lanka. With over 25 years of experience, they offer cost-effective port-to-port and door-to-door logistics solutions, including air freight and cargo insurance. Their services cater to a wide range of clients looking for reliable shipping options across the globe. FTL is committed to exceptional personalized attention and efficient shipment handling, embodying their motto 'Experience the Difference - Data included sales data, invoices and costumers full names and phones etc; Nova Provide tree and samples from stolen data to the company when its get in touch with support department.
IH Engineers
May 29, 2026
•[ ransomware, manufacturing ]
IH Engineers was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-05-29. Sector: Manufacturing. Country: United States of America. Website: ihengineers.com. IH Engineers, P.C. is a consulting firm with over 25 years of experience, dedicated to providin
g innovative and technically excellent services in design, construction, and structural evaluat
ion. The firm operates primarily in New Jersey, New York, and Pennsylvania, serving a diverse r
ange of clients.
We will upload 65gb of corporate data soon. Employee personal docs (passports, SSNs, DLs and ot
her HR information), confidential internal files, NDAs, projects, contracts and agreements, dra
wings and so on.
Leo International
May 13, 2025
•[ ransomware, manufacturing ]
Leo International was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-05-13. Country: United States of America. Website: leointernational.com. Leo International, established in 1986, serves as a comprehensive source for the PVF, HVAC, and
Plumbing Industry. The company specializes in manufacturing products through Forging, Casting,
and Injection Molding processes.
We will upload 10gb of corporate data soon. Employee personal docs (passports, SSNs, DLs, medic
al information, phones, photos, doc scans, addresses and so on), confidential internal files an
d so on.
Coldstat Refrigeration
June 23, 2026
•[ ransomware, retail, manufacturing ]
Coldstat Refrigeration was listed as a victim on the leak site of the cmdorganization ransomware group; the attack is estimated to have taken place on 2026-06-23. Sector: Agriculture and Food Production. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.coldstat.com. Coldstat Refrigeration offers a full range of industry-proven refrigeration services. From large restaurant chains to individual stores and cafesColdstat is ready to meet all your needs. The companys qualified staff will help you determine the best solution based on your individual needs. Coldstats refrigeration services include: sales of commercial refrigeration equipment, installation, maintenance and repair, layout planning, custom system design, and removal of old equipment.Translated with DeepL.com (free version)
Lee International
June 23, 2026
•[ ransomware, manufacturing ]
Lee International was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-06-23. Sector: Manufacturing. Country: South Korea. Website: www.leeinternational.com.
lpgroup.pt
June 24, 2026
•[ ransomware, manufacturing, technology ]
lpgroup.pt was listed as a victim on the leak site of the nova ransomware group; the attack is estimated to have taken place on 2026-06-24. Sector: Professional Services. Country: Portugal. Website: lpgroup.pt. LP Group, founded in 2006, has already completed approximately 1 million square meters of projects in commercial, logistics, and service areas. Highly complex projects. Compromised data profile given in sample.
Miami Machine
June 24, 2026
•[ ransomware, manufacturing, leak ]
Miami Machine was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-06-24. Sector: Manufacturing. Country: United States of America. Miami Machine Inc. specializes in machining, fabrication, and engineering services tailored for
the paper, power, steel, and OEM markets. With over 50 years of experience and a manufacturing
space of 86,000 sq. ft, they provide high-quality, custom machinery and equipment solutions.
We will upload corporate data soon. Employee personal docs (passports and other docs, photos),
NDAs, projects, contracts and agreements, client information, etc.
transvill.com.pe
June 24, 2026
•[ ransomware, manufacturing ]
transvill.com.pe was listed as a victim on the leak site of the nova ransomware group; the attack is estimated to have taken place on 2026-06-24. Sector: Transportation. Country: Peru. Website: transvill.com.pe. Transvill SRL offers national and international road transport and logistics services for cargo shipments. Data profile will provided soon
Jit Ex
June 24, 2026
•[ ransomware, leak, manufacturing ]
Jit Ex was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-06-24. JIT-EX, LLC is a privately owned for-hire trucking fleet based in Memphis and Nashville, specia
lizing in regional and local truckload services, dedicated fleets, and crossdock solutions. The
company offers a variety of services including transloading, dock services, and storage traile
rs, aiming to be a one-stop solution for transportation needs.
We will upload 40gb of corporate data soon. Employee personal docs (passports, DL numbers of 31
7 persons, SSNs, w9s and so on), credit card details, payment details, lot of NDAs, projects, c
ontracts and agreements, customer information, etc.
maglificioliliana.com
June 24, 2026
•[ ransomware, leak, manufacturing ]
maglificioliliana.com was listed as a victim on the leak site of the stormous ransomware group; the attack is estimated to have taken place on 2026-06-24. Website: maglificioliliana.com. Over 400 GB of data has been accessed and exfiltrated. This includes product designs, historical fashion lines, and technical specifications for garments. Furthermore, we have obtained customer databases from various parts of the world, financial records, commercial contracts, employee data, personal files for all staff members within the network, daily operational documents, and more.
JMS Southeast
June 2, 2026
•[ ransomware, technology, manufacturing ]
JMS Southeast was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-06-02. Sector: Professional Services. Country: United States of America. Website: jms-se.com. JMS Southeast, Inc. specializes in high-quality temperature measurement and control products, i
ncluding thermocouples, RTDs, thermowells, and transmitters, catering to various industries suc
h as aerospace, pharmaceuticals, and oil and gas.
We will upload 25gb of corporate data soon. Employee personal information (name, addresses and
so on), payment details, NDAs, projects, contracts and agreements, agreements with government,
customer information and so on.
roofdepot.com
June 25, 2026
•[ ransomware, retail, manufacturing ]
roofdepot.com was listed as a victim on the leak site of the chaos ransomware group; the attack is estimated to have taken place on 2026-06-25. Sector: Retail & E-Commerce. Country: United States of America. Website: roofdepot.com. Founded in 1998 and headquartered in Alpharetta, GA, Roof Depot is a roofing manufacturer that specializes in roof installation, repairs & replacement
Grupo Riquelme
June 13, 2026
•[ ransomware, leak, finance ]
Grupo Riquelme was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-06-13. Sector: Agriculture and Food Production. Country: Paraguay. Website: www.gruporiquelme.com. - Full Database Backup- Banking & Financial Data- Accounting & Ledger Records- Customer Databases- HR / Workforce Data- User, Role & Permission data- ERP & Critical Business Application Data
GSP Crop Science Pvt
June 25, 2026
•[ ransomware, manufacturing, leak ]
GSP Crop Science Pvt was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-06-25. Sector: Agriculture and Food Production. Country: India. Website: gspcrop.in. GSP Crop Science Limited is a leader in agricultural innovation, specializing in crop science and sustainable farming solutions. The company offers a wide range of products including pesticides, herbicides, fungicides, and plant growth regulators, designed to enhance crop productivity while minimizing environmental impact. Their target clients include farmers and agricultural businesses seeking effective and reliable crop protection solutions. With a strong commitment to research and development, GSP aims to revolutionize agriculture and support farmers in achieving high-quality, healthy crops.
vslmarine
June 26, 2026
•[ ransomware, technology, manufacturing ]
vslmarine was listed as a victim on the leak site of the nova ransomware group; the attack is estimated to have taken place on 2026-06-26. Sector: Transportation. Country: India. Website: vslmarine.com. VSL Marine Technology Pvt. Ltd. is an ISO 9001:2015 certified company specializing in 3D scanning and engineering services, particularly in marine and offshore sectors. They offer a range of services including marine retrofits, engineering design, naval architecture, and e-learning training solutions. Data profile provided.
