Elite Industech Co., Ltd
September 23, 2026
•[ ransomware, manufacturing, technology ]
Elite Industech Co., Ltd was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-09-23. Sector: Manufacturing. Country: Thailand. Website: pjemetal.com. Elite Industech Co., Ltd. (established in 2003) is a certified Class-A waste treatment plant based in Kaohsiung, Taiwan. The company operates within the circular economy sector, specializing in the eco-friendly processing of electronic waste (E-waste) and the recycling of rare and precious metals
amb-pvc.com
August 18, 2026
•[ ransomware, manufacturing ]
amb-pvc.com was listed as a victim on the leak site of the ZaWoo ransomware group; the attack is estimated to have taken place on 2026-08-18. Sector: Manufacturing. Country: France. Website: amb-pvc.com. AMB (Ateliers de Menuiseries Bidet), also known as Atelier de Menuiseries Bidet, is a French manufacturer specializing in PVC and aluminium joinery products. The company is based in Bourguenolles, Normandy, France. Its website is amb-pvc.com.
www.francare.com
August 18, 2026
•[ ransomware, healthcare, manufacturing ]
www.francare.com was listed as a victim on the leak site of the ZaWoo ransomware group; the attack is estimated to have taken place on 2026-08-18. Sector: Healthcare. Country: France. Website: www.francare.com. FRANCARE Industries is a French international technical-supply, engineering, and maintenance company, headquartered in Paris, France. The company was founded in 1988 and specializes in supplying equipment, technologies, and technical services to industrial and healthcare customers internationally
Wallatec
September 24, 2026
•[ ransomware, manufacturing, financial ]
Wallatec was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-09-24. Sector: Other. Wallatec creates high-performance carbonation systems for restaurants and busy kitchens. Their
equipment is built to handle intense daily use, working perfectly even in the most hectic envir
onments.
We will upload 15gb of corporate data soon. Employee information (passports), projects, financi
als, client information and so on.
All Tech Machine & Engineering
September 24, 2026
•[ ransomware, manufacturing ]
All Tech Machine & Engineering was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-24. Sector: Manufacturing. Country: United States of America. Website: www.alltechinc.com.
corisricambi.it
September 24, 2026
•[ ransomware, retail, manufacturing ]
corisricambi.it was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-09-24. Sector: Other. Country: Italy. Website: corisricambi.it. Presenti sul territorio da oltre un ventennio, la CO.R.I.S. S.r.l. cresciuta all'interno del...
Iberia Compositech Manufacturing
September 25, 2026
•[ ransomware, manufacturing ]
Iberia Compositech Manufacturing was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-25. Sector: Manufacturing. Country: Spain. Website: www.iberiacompositech.com.
Beatus Cartons
September 25, 2026
•[ ransomware, manufacturing, hack ]
Beatus Cartons was listed as a victim on the leak site of the Wallstreet ransomware group; the attack is estimated to have taken place on 2026-09-25. Sector: Manufacturing. Country: United Kingdom of Great Britain and Northern Ireland. Website: beatuscartons.co.uk. Beatus Cartons is a UK-based, privately owned manufacturer of printed folding cartons and packaging. Established in 1940, it produces solidboard, litho-laminated, and plastic packaging for industries including confectionery, pharmaceuticals, food, health and beauty, and automotive.
Ar Valve Resources
September 25, 2026
•[ ransomware, energy, manufacturing ]
Ar Valve Resources was listed as a victim on the leak site of the Wallstreet ransomware group; the attack is estimated to have taken place on 2026-09-25. Sector: Energy & Utilities. Country: United Kingdom of Great Britain and Northern Ireland. Website: ar-resources.com. AR Valve Resources is a UK-based distributor of industrial valves, actuators, regulators, instrumentation, and spare parts. Based in Kent, the company serves national and international customers with product sourcing, technical support, testing, certification, documentation, and shipping services.
Electrolux & Ontrac
September 25, 2026
•[ ransomware, manufacturing, retail ]
Electrolux & Ontrac was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-09-25. Sector: Manufacturing. Hello Electrolux & OnTrac,
Still no response from you. When we called your IT helpdesk posing as threat researchers and asked about the breach, we were told, "We cannot talk about it."
You have one week before we release more data - starting with information on your employees.
We'd prefer to settle this directly.
Same goes for OnTrac. We recently learned that OnTrac has been paying employees as little as $14.50 an hour. As a result, we will be releasing salary information for all of their employees.
I also managed to get in touch with a former OnTrac employee, chill guy. Said his time there was horrible.
EMAIL: xdlmfao@morke.ru
SESSION: 05651c7323273b723588d47455471ee9e27feb5187a30f2933554a705aacb38358 [Sector: Retail, Manufacturing, Transportation]
Pajulahti
September 21, 2026
•[ ransomware, manufacturing, education ]
Pajulahti was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Manufacturing. Country: Finland. Website: pajulahti.com. pajulahti.com zoominfo.com/c/pajulahti/369113600 Pajulahti Sports Institute is one of Finland's oldest and largest sports institutes, founded in 1929 and located on 110 hectares by Lake Iso-Kukkanen in Nastola (Lahti), about an hour from Helsinki. It is Finland's only official Olympic and Paralympic Training Center, known for its focus on endurance sports and paralympic athletics. Since January 2025, Pajulahti has been merged with Kisakallio and the Helsinki-based Urhea campus into Kolmen kampuksen urheiluopisto the largest sports institute in Finland, with 3 campuses, ~200 employees, 73,000 m of sports facilities, 320,000 visitors per year, and ~500 students in professional sports education. The merged group generates about 26 million in annual revenue, operates on a non-profit basis (owned by foundations)
Craisa
September 21, 2026
•[ ransomware, retail, manufacturing ]
Craisa was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-21. Website: craisa.com. craisa.com zoominfo.com/c/craisa/345610542 CRAISA S.A. is a Costa Rican distributor of agricultural, construction, and industrial machinery, founded in 1981 and headquartered in Heredia. It is the official exclusive dealer of CASE IH (agriculture) and CASE Construction Equipment in Costa Rica, covering the entire country through branches in Heredia, San Carlos, Gupiles, and Cartago. The company also distributes specialty brands including Antonio Carraro (Italian specialty tractors), Hangcha (forklifts), XAG agricultural drones, and precision farming systems (Raven/Trimble), while offering in-house service workshops, genuine parts supply, and equipment financing. It employs around 43 people with a highly loyal management core (many directors with 1522 years of tenure), operates under SAP Business One, and holds official "Carbono Neutral" certification from the Costa Rican government.
Markisol
September 21, 2026
•[ ransomware, manufacturing ]
Markisol was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Manufacturing. Country: Sweden. Website: markisol.se. markisol.se zoominfo.com/c/markisol-ab/357807356 Markisol Group is a Swedish family-owned manufacturer of window blinds (roller, venetian, pleated, roman, and panel) headquartered in Ronneby, Sweden, founded in the late 1960s by Bo Persson, who started making blinds at age 6 alongside his father and built the company into one of the world's leading blind producers. The company has been a supplier to IKEA since 1983 and is fully vertically integrated it designs and builds its own patented assembly machines (up to 400 blinds per hour), produces its own components, and weaves and prints its own fabrics at its textile plant in Narva, Estonia (in the historic Krenholm factory).
Grupo MARSAN
September 21, 2026
•[ ransomware, manufacturing, automotive ]
Grupo MARSAN was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Manufacturing. Country: Mexico. Website: grupomarsan.com. grupomarsan.com zoominfo.com/c/grupo-marsan/460771135 Grupo Marsan is a Spanish Tier 2 automotive supplier founded in 1951 in Vigo, Spain, specializing in industrial surface coatings cataphoresis (e-coating), powder and liquid painting plus metal stamping, assembly, and JIT logistics, with a capacity of 300,000 parts per day. The company operates plants in Spain (Vigo, Zaragoza), Portugal, and Mexico, and also builds and runs dedicated in-house coating lines inside clients' facilities, supported by its own technology center M-Tech. It works under IATF automotive quality standards within supply chains of major OEMs and Tier 1 suppliers. After a liquidity crisis in 2024, the group was recapitalized with private and Galician public funds (~47.5% held by Xesgalicia and Vigo Activo), and Marcos Oubia was appointed CEO. FY2024 revenue exceeded 28 million with ~450 employees, and in 2025 the company acquired KATA Aragn, growing to ~500 employees
Magnetos y Refacciones
September 21, 2026
•[ ransomware, manufacturing, retail ]
Magnetos y Refacciones was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Manufacturing. Country: Mexico. Website: magnetos.com.mx. magnetos.com.mx zoominfo.com/c/magnetos-y-refacciones-sa-de-cv/1288761434 Magnetos y Refacciones, S.A. de C.V. is a Mexican trading and service company founded in 1977 and headquartered in Guadalajara, Jalisco. Its core business is supplying magnet wire, bearings, insulating varnishes, electric motors, and spare parts for motor repair wholesale and retail, serving customers across all 32 Mexican states. Its second key business is a nationwide network of authorized service centers performing warranty and post-warranty repair for Groupe SEB brands (Krups, T-Fal, Rowenta, Moulinex) and Taurus in 810 Mexican cities. The company employs around 129 people and is part of a small group operated by Corporacin Rodaja. It also exports to Central America (mainly El Salvador), with about US$4.2 million in shipments over the last five years. Despite nearly 50 years on the market, it has virtually no digital presence its website is an empty placeholder.
StMicroelectronics
September 21, 2026
•[ ransomware, technology, manufacturing ]
StMicroelectronics was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Technology. Country: Italy. Website: st.com. st.com zoominfo.com/c/stmicroelectronics/114508234 Revenue $13.1 Billion STMicroelectronics (ST) is one of the world's largest semiconductor companies and Europe's biggest chipmaker, headquartered in Geneva, Switzerland. Formed in 1987 through the merger of Italian and French state-owned chip companies, it is a fully integrated manufacturer it designs, produces, and sells its own chips. Its core products are microcontrollers (the flagship STM32 family), sensors, analog and power chips, silicon carbide devices for electric vehicles, and chips for data centers and satellites. The company serves over 200,000 customers worldwide including Apple, Tesla, Bosch, Samsung, and SpaceX supplying components for cars, smartphones, industrial equipment, and data centers. It operates 14 manufacturing plants across Europe and Asia, employs about 49,000 people, and invests roughly 17% of its revenue in R&D.
Applied Composites
September 24, 2026
•[ ransomware, manufacturing, technology ]
Applied Composites was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-09-24. Sector: Manufacturing. Country: United States of America. Website: appliedcomposites.com. Applied Composites is a leading U.S. manufacturer specializing in advanced composite components, assemblies, engineering, and tooling for the aerospace, defense, and space industries. The company provides highly engineered composite structures for aircraft, engines, missiles, unmanned aerial vehicles (UAVs), satellites, and launch vehicles. Its vertically integrated capabilities include design, tooling, manufacturing, machining, assembly, testing, and engineering support. Applied Composites operates multiple specialized facilities equipped with autoclaves, CNC machining centers, clean rooms, and advanced testing equipment. The company serves major aerospace and defense organizations and focuses on delivering lightweight, durable, high-performance composite solutions for demanding commercial, military, and space applications.
The company headquarters is located in 25671 Commercentre Drive, Lake Forest, CA 92630, United States. 501-1000 Employees
Apollo 21 – Quality Truck, Bus & Trailer Spare Parts South Africa
September 19, 2026
•[ ransomware, manufacturing, retail ]
Apollo 21 Quality Truck, Bus & Trailer Spare Parts South Africa was listed as a victim on the leak site of the BlackLocks ransomware group; the attack is estimated to have taken place on 2026-09-19. Sector: Transportation. Country: South Africa. Website: apollo21.co.za. Views: 985
International Chemical Co.
September 26, 2026
•[ ransomware, manufacturing, leak ]
International Chemical Co. was listed as a victim on the leak site of the Barracuda ransomware group; the attack is estimated to have taken place on 2026-09-26. Sector: Manufacturing. International Chemical Company (ICC) manufactures specialty metalworking fluids, industrial cleaners, rust preventatives, and custom chemical formulations.
We have extracted the most important files from their main file server and possess data on their sales, formulas, patents, manufacturing, contracts, and partners.
For example, we possess the full formulation and manufacturing instructions for I.C.C.s patented Biodraulic hydraulic oil. And even more than that. It is available for sale to competitors.
Victim website: https://e-icc.com | Severity: HIGH | Size: 90 GB | Status: selling | $50,000
Pantaneiro Capas
September 27, 2026
•[ ransomware, manufacturing ]
Pantaneiro Capas was listed as a victim on the leak site of the arcusmedia ransomware group; the attack is estimated to have taken place on 2026-09-27. Sector: Manufacturing. Country: Brazil. www.pantaneirocapas.com.brPantaneiro Capas has been in the waterproof products market for Deadline: 2026-10-04 11:32:00.000000
