SIFCO Industries INC.
September 7, 2026
•[ ransomware, manufacturing, energy ]
SIFCO Industries INC. was listed as a victim on the leak site of the metaencryptor ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Manufacturing. Country: United States of America. Website: sifco.com. SIFCO Industries is a world-wide provider of highly engineered forged components to the Aerospace, Energy and Defense markets. We supply flight-critical forged components and machined assemblies to all of the leading aircraft and engine manufacturers in the world. These components can be found on virtually all of the commercial and military fixed-wing aircraft as well as helicopters and business jets. Our products are also supplied to the leading steam and gas turbine manufacturers and oil producers serving the energy sector.
Jbc
September 7, 2026
•[ ransomware, manufacturing, technology ]
Jbc was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-07. Country: Spain. Website: www.jbctools.com.
EllisDon Corporation
September 7, 2026
•[ ransomware, leak, manufacturing ]
EllisDon Corporation was listed as a victim on the leak site of the metaencryptor ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Professional Services. Country: Canada. Website: www.ellisdon.com. EllisDon Corporation is a leading Canadian construction and infrastructure services company. Founded in 1951, the company provides construction management, engineering, project development, and facilities management services across a wide range of sectors, including healthcare, transportation, commercial, industrial, government, and defense infrastructure. EllisDon operates across Canada and internationally.
Semper Laser
September 7, 2026
•[ ransomware, manufacturing ]
Semper Laser was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Manufacturing. Country: Sweden. Website: semperlaser.com. Spa and Salon Management Florida
Benshaw, Inc.
August 27, 2026
•[ ransomware, manufacturing, financial ]
Benshaw, Inc. was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-08-27. Sector: Manufacturing. Country: United States of America. Website: Benshaw, Inc.. [manufacturer, research] Benshaw, Inc. (Pittsburgh) and affiliated UTG entities (Unico, Benshaw Canada, AuCom, Excel, Noble Victoria).
~100+ corporate Visa/PCard records with full PAN + SSN + DOB + home address
637 former employees with full SSN/DOB/address on one spreadsheet
88 active employee folders plus multi-year Canada payroll
Global bank account numbers (PNC, BMO, BNZ, St George, Commerzbank, JPM London, BBVA, GNB)
ACH NACHA files with vendor routing/account numbers
UEdit source with hardcoded XOR key 4148865678 and date-based CalcBackDoor()
Oil & gas customer job packs (Chevron, Petrobras, EOG, Santos AU, KOC)
KÖRBER
September 7, 2026
•[ ransomware, manufacturing, technology ]
KRBER was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Manufacturing. Country: Germany. [AI generated] Krber is a German technology conglomerate headquartered in Hamburg, Germany. The company operates across multiple industries including supply chain automation, pharma, tissue, tobacco, and digital solutions. Krber develops and delivers software, machinery, and integrated systems to help businesses optimize their operations. With a global presence spanning numerous countries, it serves clients in logistics, healthcare, and manufacturing sectors worldwide.
Master Manufacturing Co., Inc.
September 7, 2026
•[ ransomware, manufacturing, leak ]
Master Manufacturing Co., Inc. was listed as a victim on the leak site of the Dark Project ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Manufacturing. Country: United States of America. Website: www.mastermfg.com. About Master Manufacturing Master Manufacturing Co., Inc. specializes in custom metal stamping and production services, leveraging over 200 years of combined design and engineering expertise. Founded in 1970 and located in southern Indiana, the company offers a range of services including laser cutting, wire bending, and heat treatment, all while maintaining a commitment to high-quality standards certified by IATF 16949. Their intended clients span various industries such as appliance, HVAC, lighting, automotive, and RV, with a focus on delivering innovative and efficient solutions. Master Manufacturing prides itself on quick turnaround times and the ability to meet specific customer needs through early design involvement and advanced manufacturing techniques. Master Manufacturing Co specializing in custom metal stamping and production services has fallen victim to a significant cyberattack. Hackers reportedly exfiltrated 36 gigabytes of sensitive data from the companys servers. The stolen information includes SQL databases containing personal data, as well as technical plans and schematics for custom metal parts. The breach raises serious concerns regarding intellectual property theft and potential privacy violations for employees and clients.
United Group
September 7, 2026
•[ ransomware, manufacturing, retail ]
United Group was listed as a victim on the leak site of the Vexy Ransomware ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Other. Country: India. Website: united-group.in. United Group is a diversified Indian business group delivering innovative products and services across multiple industries. Founded in 2003, the company began as a food and beverage consultancy and has since expanded into food ingredients, nutraceuticals, industrial machinery, infrastructure, fashion, digital branding, packaging, and automotive accessories. With a strong focus on quality, innovation, and customer satisfaction, United Group operates through a network of specialized businesses, serving clients across India and international markets. Backed by certified manufacturing facilities and experienced professionals, the group is committed to providing reliable, sustainable, and value-driven solutions that support business growth and long-term success.
El Carriel
September 7, 2026
•[ ransomware, retail, manufacturing ]
El Carriel was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Agriculture and Food Production. Country: Colombia. Website: elcarriel.com.co. elcarriel.com.co Productos Alimenticios El Carriel S.A.S. Colombian family food company and dominant leader of Bogot's arepa market (~70% share) founded Aug 17, 1992 by two brothers from Sonson, Antioquia (Luis Alberto & Luis Alfonso Valencia) and their wives, who started selling handmade arepas from bicycles via a consignment model. Today: 9 plants in Bogot & Medelln, 1M+ arepas/day, full vertical integration 2,000 ha of own corn (Pioneer seeds), own mill, 400+ employees, ~$8M revenue (31.3B COP, 2023), no external investors. Exporter to the US (since 1999), Australia and England; state-recognized ESG model: 578 solar panels, 30% electric fleet. Tragedy: Nov 2024 co-founder Luis Alfonso was murdered at his ranch by an insider who had spent 2 months profiling the property; both killers got 36 years in 2025, and the business never stopped. Bottom line: two uneducated brothers on bicycles became a vertically integrated agro-industrial champion that survived even its founder's
Comin Sac
September 7, 2026
•[ ransomware, leak, manufacturing ]
Comin Sac was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-07. Country: Peru. Website: comin.pe. comin.pe zoominfo.com/c/comin-sac/509891136 Buenaventura Peru's largest publicly-traded precious metals miner founded in 1953 by Alberto Benavides, now run by the third generation of the family (CEO Leopoldo Benavides), and the first Peruvian company ever listed on the NYSE (BVN, 1996). Its portfolio: underground gold-silver mines (founding Julcani, Yumpag silver star ramping to 10.5M oz/yr, Orcopampa with its new 920m "La Capitana" incline), the ramping open-pit El Agrepin (~200 koz gold-equivalent/yr from 2026), and 71.95% of El Brocal Peru's largest underground mine, whose Transteki expansion ($250M) doubled its copper output. It also holds 33.75% of Cerro Verde, one of the world's top-10 copper mines (operated by Freeport). Pipeline: option on 40% of Michiquillay (with Anglo American) and Los Chancas JV (Newmont). 202526 results are the best in company history: record gold ($3,300/oz) and silver ($36/oz) prices, near-zero debt (0.3x), $1.2B liquidity, dividends restored ~4%
Biotipo Jeans
September 7, 2026
•[ ransomware, retail, manufacturing ]
Biotipo Jeans was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Retail & E-Commerce. Country: Brazil. Website: biotipo.com.br. biotipo.com.br zoominfo.com/c/biotipo-jeans/431018059 Biotipo Brazil's largest ready-stock ("pronta-entrega") jeans manufacturers an Akkari-family company (Confeces Alta Moda Ltda, CNPJ 04.273.385/0001-11) founded in 2001, with the brand active in jeanswear since 1980, HQ'd in the legendary Brs wholesale district of So Paulo plus an industrial plant in Itapevi. Its model: B2B wholesale at fashion-week speed weekly collections, minimum orders of just one "grade" (1012 pieces), 15,000+ m of production/logistics space (70% outsourced), and distribution to 15,000+ retail points across Brazil (women's, men's, teen and plus-size lines). 10+ consecutive years in Top of Mind as one of Brazil's most-remembered jeans brands; R$30M+ share capital, 1,0015,000 employees by registry classification. Bottom line: the quiet volume king of Brazilian denim no D2C glamour, just industrial speed, perfect fit and a brand that "sells itself" in more stores than almost any local competitor.
Zanini
September 7, 2026
•[ ransomware, manufacturing, automotive ]
Zanini was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Manufacturing. Country: Brazil. Website: zanini.com. zanini.com zoominfo.com/c/zanini/359207305 Zanini is the global market leader in automotive wheel trim a Spanish family firm founded in 1965 in Barcelona, owned by the Torras family since 1976, with 1,800 employees across 12 plants on 3 continents. It makes 1 in 4 wheel covers sold worldwide (~100M units/year) for virtually every major OEM, plus grilles, emblems, EV charge-port covers and pedestrian airbag parts. Its strategic pivot: radar-transparent, heated & illuminated front emblems (radomes) first launched on VW Atlas, now featured on the new Mercedes CLA (2025) the key sensor window for the autonomous-driving era. Proprietary tech: ZANICHROME metallization (chrome-look without chrome, "night & day" effects, electromagnetic transparency) + 17 patent families and TactoTek IMSE license (2024). Funded privately (81.5M debt raise, Oct 2025), chairman Joan Miquel Torras, CEO Jordi Torras (twice a Dakar Rally racer).
Yapı Merkezi
September 7, 2026
•[ ransomware, manufacturing, retail ]
Yap Merkezi was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Manufacturing. Country: Turkey. Website: ym.com.tr. ym.com.tr rocketreach.co/yapi-merkezi-profile_b5c7f2fff42e0db7 YM Group is a Turkish family-owned manufacturing and brand house founded in 1986 in Istanbul by Yksel Mehmet Yldrm, built on a flexible-packaging plant in orlu (Halal-certified, exporting to Europe/MENA). Its crown jewel: it owns and operates the legendary American trail-running brand Ultimate Direction (the 1935 inventor of the hydration pack) designing, manufacturing in Turkey and distributing it worldwide plus its own jewelry line Ela by YM and investment arm YM Capital. The group follows the classic ladder: manufacturing own brands capital, with Halal certification as a niche edge for Gulf/Asian markets. Small core team (~110), private, low-profile, no public financials. Bottom line: a quiet Turkish industrial family that turned commodity packaging profits into ownership of an iconic American outdoor brand.
Nile Projects Trading
September 7, 2026
•[ ransomware, retail, automotive ]
Nile Projects Trading was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Other. Country: Egypt. Website: nileprojects.com. nileprojects.com zoominfo.com/c/nile-projects--trading-co/357370722 Nile Projects & Trading is a private Egyptian holding founded in 1972 by Ossama El-Naggar, HQ'd in Giza/Cairo with 3,000+ employees, 750,000+ customers and 6 offices across Egypt and Jordan. It's Egypt's exclusive Bridgestone importer (since 1990) running 50+ Fit & Fix service centers plus unique mobile tire vans and the country's luxury fashion franchise king: Burberry, Ferragamo, BOSS, Calvin Klein, Polo Ralph Lauren, Sandro, Maje (launched Jordan), Kenzo, plus Matalan for mass market and Amorino/Eichholtz/TIMEVALLE in F&B, furniture and watches. Over 50+ years it has introduced 80+ international brands to Egypt and the Middle East, pioneering retail after the 2004 import opening. Key strengths: fully self-financed (no external debt), its own ERP software, owns the malls it anchors (Katameya Downtown), and a 2bn+ EGP credit line recently winning Bridgestone's global Toolbox award 2025.
Drogueria Saporiti Sacifia
September 7, 2026
•[ ransomware, leak, healthcare ]
Drogueria Saporiti Sacifia was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Retail & E-Commerce. Country: Argentina. Website: drogueria-saporiti.com.ar. drogueria-saporiti.com.ar zoominfo.com/c/drogueria-saporiti-sacifia/462786110 100GB data stolen! Droguera Saporiti is a century-old Argentine pharmaceutical wholesaler and manufacturer, founded in 1901 in Buenos Aires, now run by the Otero Pose family with ~110 employees and 8,700 m of facilities. It's the silent "backbone" of Argentine pharmacies: 3,500+ products, 7,000+ pharmacy clients, wholesale distribution plus imports/exports of raw materials. Its flagship is the legendary Parafarm brand ("orange line" of galenic essentials vaseline, Pasta Lassar, Agua de Dalibour, hydrogen peroxide) sold nationwide since the 1960s, alongside Sweet Rose, Home Test, Wild Skin and Well Being. It survived a devastating fire in the 1990s and a rough 201415 ANMAT season (interjurisdictional trade ban + Parafarm lot withdrawal). Bottom line: a low-profile family institution with huge brand equity Argentina's reference house for pharmacy-grade essentials.
Mefa Group www.mefagroup.com.tr / MEFA Endüstri www.mefaendustri.com / and (Efachem, Eco...
August 25, 2026
•[ ransomware, manufacturing, automotive ]
Mefa Group www.mefagroup.com.tr / MEFA Endstri www.mefaendustri.com / and (Efachem, Eco... was listed as a victim on the leak site of the blacknevas ransomware group; the attack is estimated to have taken place on 2026-08-25. Sector: Manufacturing. Country: Turkey. Website: mefagroup.com.tr. https://send.exploit.in/#37608d72633301fc62801dfdf9111dbe!BsYvGiQz6WmjZo1VvPwTi8lU2K7prrPY2q6CdMORZn0List of files. For details and cooperation, write to Telegram https://t.me/BlackNevas or email happyCarter@mail.com.MEFA Group is a Turkish industrial group (headquartered in Ankara), founded in 2006. It operates in industrial manufacturing, plastics, rubber, processing, and logistics. The group has over 115,000 m of production space, over 2,000 employees, and several facilities in Turkey, Romania, and Poland. Its main areas of focus are the automotive industry, white goods, and related industries.MILKRUN Milkrun Lojistik, the group's logistics division. It provides integrated and smart logistics solutions for group companies and partners (focusing on efficiency, digitalization, and sustainability). It is not the Australian grocery delivery service of a similar name.Efachem, a division specializing in plastic and rubber compounds (compound solutions), develops customized formulas to meet customer needs, ensuring compatibility with production processes and consistent quality.Ecopolymer, a division specializing in raw materials processing and technology, utilizes cutting-edge recycling technologies, converting plastic waste into high-performance raw materials within the framework of a circular economy.All these companies operate as a single ecosystem: production (MEFA Endstri), raw materials/compounds (Efachem), processing (Ecopolymer), and logistics (Milkrun).
contreras.com.ar
September 8, 2026
•[ ransomware, manufacturing, energy ]
contreras.com.ar was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-09-08. Country: Argentina. Website: contreras.com.ar. Founded in 1947 by the Contreras brothers, the company has continuously evolved and modernized, focu...
copeplastics.com
September 8, 2026
•[ ransomware, manufacturing, hack ]
copeplastics.com was listed as a victim on the leak site of the chaos ransomware group; the attack is estimated to have taken place on 2026-09-08. Sector: Manufacturing. Country: United Kingdom of Great Britain and Northern Ireland. Website: copeplastics.com. Cope Plastics is a leading U.S. distributor and fabricator of performance plastics, serving industrial and commercial customers since 1946. From our headquarters in Alton, Illinois and through multiple branch locations, we support clients across countless sectorsheavy equipment, transportation, aero
mcnishsteel.com
September 8, 2026
•[ ransomware, manufacturing ]
mcnishsteel.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-09-08. Sector: Manufacturing. Country: Canada. Website: mcnishsteel.com. The company is headquartered in Edmonton, Alberta, and was founded in 1978 by William and Wallace McNish. It has developed
cenmar-manila.com
September 8, 2026
•[ ransomware, manufacturing ]
cenmar-manila.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-09-08. Sector: Manufacturing. Country: Philippines. Website: cenmar-manila.com. The company was registered with the Philippine Securities and Exchange Commission in 1997 and received authorization to operate as a
