Zorlu Holding
September 20, 2026
•[ ransomware, manufacturing, energy ]
Zorlu Holding was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-20. Sector: Manufacturing. Country: Turkey. Website: www.zorlu.com.
newmantractor.com
September 21, 2026
•[ ransomware, manufacturing ]
newmantractor.com was listed as a victim on the leak site of the threeam ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Manufacturing. Country: United States of America. Website: newmantractor.com. Since 1976, Newman Tractor has been serving the heavy equipment industry both domestically, and internationally. Originally founded as a farm equipment business in Boone County, Kentucky, Newman Tractor has transformed into one of this country's m
IKEGAMI TSUSHINKI COMPANY LIMITED
September 21, 2026
•[ ransomware, manufacturing, technology ]
IKEGAMI TSUSHINKI COMPANY LIMITED was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Manufacturing. Country: Japan. Website: www.ikegami.co.jp.
Grupolider
September 21, 2026
•[ ransomware, manufacturing, retail ]
Grupolider was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Other. Country: Angola. Website: grupolider-ao.com. grupolider-ao.com zoominfo.com/c/grupolider/429885445 Grupolider is an Angolan diversified holding company founded in 1999, headquartered in Catete (Luanda province). The group operates in agriculture, logistics, freight forwarding, construction, and furniture manufacturing, with its flagship business being Novagrolider the largest agricultural producer in Angola. Novagrolider farms around 20,000 hectares of land and produces roughly 150,000 tons of food per year (bananas, vegetables, fruit, and dairy), while the group employs over 3,200 direct staff. The company exports to Portugal, Spain, France, Belgium, Russia, South Africa, and Morocco, and was the first farm in Africa to receive GlobalGAP certification. Estimated annual revenue is around USD 1315 million (Novagrolider alone), though reliable consolidated figures for the private group are not publicly disclosed. Since 2021, after the death of co-founder Joo Macedo, the group has been led by his brother and partner Jos Macedo.
Flex Ltd
September 21, 2026
•[ ransomware, manufacturing, technology ]
Flex Ltd was listed as a victim on the leak site of the metaencryptor ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Manufacturing. Country: United States of America. Website: flex.com. Flex Ltd. is a global technology manufacturing and supply-chain company headquartered in Austin, Texas. It provides design, engineering, electronics manufacturing, supply-chain management, and infrastructure solutions for customers across the data center, AI, automotive, healthcare, industrial, communications, and consumer technology sectors. Flex operates more than 100 facilities worldwide and employs approximately 150,000 people.
Summa Gold
September 21, 2026
•[ ransomware, manufacturing ]
Summa Gold was listed as a victim on the leak site of the anubis ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Manufacturing. Behind the scenes of a gold mining company.
Astemo, Ltd.
September 21, 2026
•[ ransomware, manufacturing, automotive ]
Astemo, Ltd. was listed as a victim on the leak site of the metaencryptor ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Manufacturing. Country: Japan. Website: www.astemo.com/en. Astemo operates worldwide as a global mega-supplier of automotive parts, with approximately 80,000 employees across the United States, Asia, China, Europe, and Japan. Through operations in three business segments (Electrification Business, Vehicle Business, and Motorcycle Business), we develop, manufacture, sell and service automotive parts, transportation and industrial machinery, equipment and systems.
Metallco
September 21, 2026
•[ ransomware, manufacturing ]
Metallco was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Manufacturing. Country: Brazil. Website: www.metallco.com. Norway
Sealcon
September 22, 2026
•[ ransomware, manufacturing, technology ]
Sealcon was listed as a victim on the leak site of the termite ransomware group; the attack is estimated to have taken place on 2026-09-22. Sector: Manufacturing. Country: United States of America. Website: www.sealconusa.com. Founded in 1989 and headquartered in Colorado, Sealcon is a cable management provider in North America consisting of rated electrical and electronic components such as liquid-tight strain reliefs, cable glands, circular connectors, UL enclosures, conduit, and electrical accessories.
Textile City
September 22, 2026
•[ ransomware, manufacturing ]
Textile City was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-22. Sector: Manufacturing. Country: Canada. Website: www.textilecity.ca.
DI.C.S.EL. S.R.L.
September 22, 2026
•[ ransomware, manufacturing, financial ]
DI.C.S.EL. S.R.L. was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-09-22. Sector: Manufacturing. Country: Italy. Introduction DI.C.S.EL. S.R.L., founded in 2005, is an Italian company headquartered in Milan a
nd operating throughout Lombardy, specializing in the provision of technical solutions for the
electrical and measurement sectors.
We will upload 9gb of corporate data soon. Employee personal information (drivers licenses, EU
IDs), financials, payment details, projects, NDAs and so on.
TDMI
September 22, 2026
•[ ransomware, manufacturing, leak ]
TDMI was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-09-22. TDMI has an in-house sample department for outstanding product development and quality testing.
The company stay alert to emerging trends and develop innovative textiles based on constant ma
rket research analyses.
We will upload 33gb of corporate data soon. Detailed employee personal information (SSNs, drive
rs licenses, passports), financials, credit cards, projects, client data, NDAs and so on.
Coe Press Equipment
September 22, 2026
•[ ransomware, manufacturing, financial ]
Coe Press Equipment was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-09-22. Sector: Manufacturing. Country: United States of America. COE Press Equipment designs and manufactures a complete line of premiere coil handling and serv
o roll feed equipment from stand-alone roll feeds, precision straighteners, and reels to comple
te integrated feed systems and cut-to-length lines.
We will upload 25gb of corporate data soon. Detailed employee personal information (SSNs, drive
rs licenses, passports and other HR files), financials, projects, confidential client docs, NDA
s and so on.
Krapf Group
September 22, 2026
•[ ransomware, manufacturing ]
Krapf Group was listed as a victim on the leak site of the kairos ransomware group; the attack is estimated to have taken place on 2026-09-22. Sector: Manufacturing. Country: United States of America. Founded in 1942 and headquartered in West Chester, Pennsylvania, Krapf Group is a family-owned and operated transportation business. Operates a fleet of more than 2,500 school buses and commercial vehicles with over 3,500 employees. The data also contains personal information about thousands of bus drivers.
COSEF - Consorzio di Sviluppo Economico del Friuli
September 23, 2026
•[ ransomware, manufacturing ]
COSEF - Consorzio di Sviluppo Economico del Friuli was listed as a victim on the leak site of the Booba Project ransomware group; the attack is estimated to have taken place on 2026-09-23. Sector: Other. Country: Italy. Website: cosef.fvg.it. Facilities Services Stolen data: 200 GB.
Urban Engineering
September 23, 2026
•[ ransomware, manufacturing, financial ]
Urban Engineering was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-09-23. Sector: Manufacturing. Urban Engineering is a company that specializes in providing engineering services. They focus o
n delivering innovative solutions for various projects. Their intended clients include business
es and organizations seeking professional engineering expertise. The company is headquartered i
n Annandale, Virginia.
We will upload 20gb of corporate data soon. Employee information, projects, lots of financial d
ocuments, contracts and agreements, NDAs and so on.
ASYAD GROUP
September 23, 2026
•[ ransomware, manufacturing ]
ASYAD GROUP was listed as a victim on the leak site of the Spirals ransomware group; the attack is estimated to have taken place on 2026-09-23. Sector: Transportation. Country: Oman. Website: www.asyad.com. Asyad Group is Omans global integrated logistics provider, ranked 4th on Forbes 10 Biggest Logistics Companies in MENA list.
vestfrostsolutions.com
August 31, 2026
•[ ransomware, manufacturing, retail ]
vestfrostsolutions.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-08-31. Sector: Other. Country: Norway. Website: vestfrostsolutions.com. Vestfrostsolutions.com The company sells reliability and precision back bar coolers for Red Bull, ...
Tomix / Grupo JOPER
September 23, 2026
•[ ransomware, manufacturing ]
Tomix / Grupo JOPER was listed as a victim on the leak site of the spacebears ransomware group; the attack is estimated to have taken place on 2026-09-23. Sector: Manufacturing. Country: Portugal. Website: tomix.com.pt. Tomix Indstria de Equipamentos Agrcolas e Industriais, Lda. is a Portuguese manufacturer of crop-protection equipment, best known for agricultural sprayers, atomizers, dusters and related machinery. Founded in 1924 near Torres Vedras by Francisco Xavier Damio, it grew into a market leader in Portugal for plant-treatment equipment, including rotomoulded tanks and high-pressure washers. Since 1997 Tomix has been majority-owned by JOPER Indstria de Equipamentos Agrcolas, S.A., and today it operates as part of the family-run JOPER Group alongside JOPER and Ribatejo. Together they supply complementary agricultural machinery for transport, soil tillage and crop treatment across Iberia and export markets https://tomix.com.pt/
Solucioning S.A.
September 24, 2026
•[ ransomware, leak, energy ]
Solucioning S.A. was listed as a victim on the leak site of the Barracuda ransomware group; the attack is estimated to have taken place on 2026-09-24. Sector: Other. Country: Argentina. This is a small company of 4-5 people, yet it has big clients in the oil production sector.
Unfortunately, the company neglected data security, allowing us to gain access to all their confidential files - projects, documents, blueprints, and so on.
The company has been ignoring us for five days now, and we will soon publish their files. This is a warning. We do not wish to harm anyone, but we are prepared to inflict maximum damage.
Victim website: https://www.solucioning.com/ | Severity: HIGH | Size: 463 GB | Status: selling | $100,000
