Agra Industries
September 28, 2026
•[ ransomware, manufacturing, energy ]
Agra Industries was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Agriculture and Food Production. Country: United States of America. Website: agraind.com. Agra Industries: Founded in 1962, Agra Industries is a third-generation company that specializes in providing EPC contracting and manufacturing of specialized equipment to agricultural industries. Agra's proven equipment processes and cures over 1 trillion seeds annually, of various sizes and genetics. Agra has also engineered and constructed more than $350 million of ethanol projects - building eight complete facilities in North America.
The company headquarters is located in 1211 W. Water Street, Merrill, WI 54452, United States.
Stockham Construction
September 28, 2026
•[ ransomware, manufacturing, technology ]
Stockham Construction was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Manufacturing. Country: United States of America. Website: stockhamconstruction.com. Stockham Construction, Inc. is a commercial union subcontractor with over 30 years of experience specializing in interior and exterior metal stud framing, drywall, finish taping, acoustical ceilings, and commercial door installation. The company is dedicated to quality, integrity, and client satisfaction, aiming to build lasting partnerships that contribute to the success of their clients' ventures. They serve a diverse range of commercial construction projects, including advanced technology, health services, and education sectors, ensuring high standards of quality and precision. Their collaborative approach integrates multiple trades to streamline the construction process, delivering exceptional results while minimizing disruptions.
The company headquarters is located in 475 Portal Street, Cotati, CA 94931, United States. 201-500 Employees
Don Hierro
September 29, 2026
•[ ransomware, manufacturing ]
Don Hierro was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-29. Sector: Manufacturing. Country: Mexico. Website: donhierro.com. donhierro.com zoominfo.com/c/don-hierro-sl/347708573 Don Hierro Corporation, S.A. (roots to 1969, Panama City) is a Panama-based engineering, construction and manufacturing firm specializing in hydraulic works, concrete caissons, foundations and industrial building. With ISO 9001/14001/45001 certifications and 39,000 m of production facilities in Coln (its own concrete plants, quarries and caisson yards), it self-manufactures critical components a rare vertical integration in Central America. Its flagship client is the Panama Canal Authority (ACP), for which it has executed compensating-platform repairs, drainage works at the Espritu Santo and Pirro locks and coastal work for the Third Bridge consortium (~$2228M). It also builds water-supply systems (Caos de Brea, David pipeline with EMPESA), bridges, dams, breakwaters and drip-irrigation (Netafim) agriculture projects. Led by project director Javier Carrillo (34 years experience) and a team claiming 300+ cumulative
DBU Construction
September 29, 2026
•[ ransomware, manufacturing, government ]
DBU Construction was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-29. Sector: Manufacturing. Country: United States of America. Website: dbu-construction.com. dbu-construction.com zoominfo.com/c/dbu-construction-inc/358513059 DBU Construction, Inc. (founded 1998 "DBU" stands for Directional Boring and Utility, Chichester, New Hampshire) is a specialty contractor focused on trenchless horizontal directional drilling (HDD) and underground utility construction, plus roads, water/sewer, excavation and drainage work. It started drilling for Verizon Telecommunications and now serves municipalities, state and federal agencies (including Pease Air National Guard Base), utilities and developers across six New Hampshire counties and Maine, with roughly $1525M annual revenue and 1150 staff. In 2008 Jessica Towne took ownership, making it a Women-Owned Business Enterprise (WBE) and, since 2011, the first WBE in New Hampshire to offer directional drilling (also DBE-certified). Landmark projects include drilling a 1,500-foot waterline under Newfound Lake and gas-line bores under Route 102. Key strengths are its niche HDD expertise, government bid cert
Altmannshofer Sicherheits-Videotechnik
September 30, 2026
•[ ransomware, manufacturing, technology ]
Altmannshofer Sicherheits-Videotechnik was listed as a victim on the leak site of the lamashtu ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Manufacturing. Country: Germany. Website: altmannshofer.de. Altmannshofer Sicherheits-Videotechnik OHG is a German installer of electronic security systems from Affing near Augsburg, Bavaria. Since 1999 it plans and installs CCTV, burglar alarms (EMA), access control, electronic locks, fingerprint scanners
PROJAHN
September 30, 2026
•[ ransomware, manufacturing ]
PROJAHN was listed as a victim on the leak site of the lamashtu ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Other. Country: Germany. Website: projahn.de. German manufacturer and distributor of professional precision
and hand tools (drill bits, masonry/wood/steel tools, thread tools, measuring tools, sockets, wrenches, screwdrivers, pliers, flashlights, workbenches).
Becker Logistik
September 30, 2026
•[ ransomware, manufacturing ]
Becker Logistik was listed as a victim on the leak site of the lamashtu ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Transportation. Country: Germany. Website: becker-logistik.de. German logistics and transportation company specializing in national and international freight transport, particularly bulk goods. The company operates its own fleet and provides reliable transport services across Germany and Europe.
Astidental di Sabbione
September 30, 2026
•[ ransomware, manufacturing ]
Astidental di Sabbione was listed as a victim on the leak site of the lamashtu ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Manufacturing. Country: Italy. Website: bquadro.it. is a leading Italian distributor with over 60 years of experience specializing in dental equipment, instruments, and dental laboratory supplies. The company provides comprehensive services, including dental office turnkey design, digital workflow
Buford-Thompson Company, LTD
September 30, 2026
•[ ransomware, manufacturing, financial ]
Buford-Thompson Company, LTD was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Manufacturing. Country: United States of America. Website: Buford-Thompson Company, LTD. [construction] Buford-Thompson Company, LTD, a Texas construction general contractor with 30+ years of history building schools for K-12 districts across the state.
The exposed dataset totals 1.707 TB and includes:
5 years of W-2 EFW2 files (20212025) containing plaintext Social Security numbers, wages, and addresses for 350+ current and former employees every SSN readable without any decryption.
9.3 GB of attorney-client privileged files from the Stanton ISD v. BTC litigation legal strategy, discovery responses, and counsel communications.
Complete Frost Bank infrastructure four account numbers, ACH routing credentials, line-of-credit agreements (renewed April 2026), signature cards, and monthly bank statements spanning 20222026.
36+ active school construction projects blueprints, bid estimates, cost structures, subcontractor pricing, and change orders for ISD projects across Texas. A competitor's dream dataset.
2,000+ donor records from Human Services Campus (Phoenix homeless-services nonprofit) with full PII: name, address, phone, email, employer, and donation amounts.
QuickBooks company files (.QBW) from Along Side Ministries (Phoenix prison ministry) containing complete accounting, donor, and likely payroll data.
Thompson family personal records owner personal insurance, loans, ranch property (Jack County), airplane ownership, bond dividends, and personal tax documents.
Orth Automobile
March 6, 2024
•[ ransomware, manufacturing ]
Orth Automobile was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2024-03-06. Sector: Manufacturing. Country: Germany. Website: www.orth-automobile.de. Germany
wolfusofsky.de
September 30, 2026
•[ ransomware, manufacturing ]
wolfusofsky.de was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-09-30. Country: Germany. Website: wolfusofsky.de. The group provides a broad range of construction and infrastructure services to public and private clients in Rhineland-Palatinate, Saarland, neighboring
M. B. Kahn Construction Co.
August 1, 2026
•[ ransomware, manufacturing, healthcare ]
M. B. Kahn Construction Co. was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-08-01. Sector: Manufacturing. Country: United States of America. Website: mbkahn.com. [AI generated] M. B. Kahn Construction Co. is a general contracting and construction management firm based in the United States, headquartered in Columbia, South Carolina. Founded in 1926, the company operates primarily across the southeastern United States. It serves sectors including commercial, industrial, healthcare, education, and government markets, delivering services such as design-build, preconstruction planning, and facility construction.
CEN and Cenelec
August 1, 2026
•[ ransomware, technology, manufacturing ]
CEN and Cenelec was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-08-01. Sector: Other. Country: Belgium. [AI generated] CEN (European Committee for Standardization) and CENELEC (European Committee for Electrotechnical Standardization) are European standardization organizations headquartered in Brussels, Belgium. They develop and publish voluntary technical standards across industries including engineering, manufacturing, energy, and electrotechnical sectors. Their standards facilitate trade, safety, and interoperability across European Union and European Economic Area member states.
Schreiner Trockenbau GmbH
August 1, 2026
•[ ransomware, manufacturing ]
Schreiner Trockenbau GmbH was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-01. Sector: Manufacturing. Country: Austria. Website: www.schreiner-trockenbau.at.
Dienst Pack Systems
August 1, 2026
•[ ransomware, manufacturing ]
Dienst Pack Systems was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-01. Sector: Manufacturing. Country: Germany. Website: www.dienst-packsystems.de.
Sigma Plastics Group
August 1, 2026
•[ ransomware, manufacturing ]
Sigma Plastics Group was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-08-01. Sector: Manufacturing. Country: United States of America. Website: www.sigmaplasticsgroup.com. United States
Wire Products
August 2, 2026
•[ ransomware, manufacturing ]
Wire Products was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-02. Sector: Manufacturing. Country: United States of America. Website: www.wireproducts.us.
www.buzztrading104.co.za
August 2, 2026
•[ ransomware, manufacturing, finance ]
www.buzztrading104.co.za was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-08-02. Sector: Financial Services. Country: South Africa. Website: www.buzztrading104.co.za. Buzz Trading 104 (Pty) Ltd (also trading as Master Products) is a South African privately owned manufacturer and wholesa...
Hans & Jos. Kronenberg GmbH
August 3, 2026
•[ ransomware, manufacturing, technology ]
Hans & Jos. Kronenberg GmbH was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-08-03. Sector: Manufacturing. Country: Germany. Website: kronenberg-gmbh.de. Hans & Jos. Kronenberg GmbH is a German company founded in 1932 and based in Bergisch Gladbach. It specializes in the development and manufacturing of high-quality components for the elevator industry and mechanical engineering, including door locks, switches, control panels, and LED lighting.
micropack.com.ar
July 16, 2026
•[ ransomware, manufacturing ]
micropack.com.ar was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-07-16. Sector: Manufacturing. Country: Argentina. Website: micropack.com.ar. Micropack is a well-known food and household goods distributor that has been serving businesses and...
