NOVADATA
October 30, 2026
•[ ransomware, technology, finance ]
NOVADATA was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Technology. Country: Argentina. Website: novadata.com.ar. novadata.com.ar NOVADATA S.A. is an Argentine IT integration group founded in 1994 in Buenos Aires, comprising Novadata, Net Service and Compaa Global de Servicios with 130 plus certified professionals. It provides IT infrastructure, business continuity, AI, pay-per-use HPE GreenLake, microinformatics and 24/7 Service Desk services to major corporations across Argentina. It holds HPE Platinum, Microsoft Gold, Cisco Silver, VMware Enterprise and Symantec Gold partner certifications, adding Huawei Enterprise Authorized Reseller status in 2026. Major clients include Bayer, Veolia, La Annima, Petrobras, Citibank, Roche and Bimbo, many with over 10 years of partnership. The group completed a financial restructuring agreement from 2014, declared fulfilled by court in March 2026. Recent strategic moves include an AI alliance with AYI Group, Fortinet cybersecurity training and launch of Novadata GREEN IT asset disposition services.
Grundbaulabor Trier
October 26, 2026
•[ ransomware, manufacturing, leak ]
Grundbaulabor Trier was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Manufacturing. Country: Germany. Website: gbl-trier.de. gbl-trier.de Grundbaulabor Trier is a German geotechnical engineering firm founded in 1960 in Trier by Dr. Paul Lehmann, now run by the third generation of the Lehmann family with 23 qualified engineers. It has completed over 20,000 projects in soil investigation, foundation design, construction supervision, environmental contamination assessment and hydrogeology across Rhineland-Palatinate, Saarland and Luxembourg. The firm operates its own soil mechanics laboratory offering fast and reliable sample processing with modern testing equipment. Led by Managing Directors Eric Lehmann and Bernd Mertes, it is one of the leading geotechnical bureaus in the Trier-Saarbrcken-Luxembourg region.
SOME
October 26, 2026
•[ ransomware, technology, manufacturing ]
SOME was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Country: Italy. Website: some.it. some.it SOME Srl is an Italian ERP and financial systems consulting company founded in 2001 in Milan, delivering end-to-end implementations of Epicor Kinetic, Infor SunSystems and Fluentis ERP for manufacturing, hospitality and oil and gas clients. With about 22 employees and revenue of 2.8 million euro, it has completed over 100 implementations across Europe, the Americas and North Africa. The company operates both as a system designer building ERP architectures and as a local specialist adapting global models to Italian fiscal and regulatory requirements. Led by Sales Director Franco Giannini and Partner Hussein Bahobeshi with 25 years of hospitality ERP expertise, it serves international hotel chains, oil companies like Mellitah and ENI Congo, and mid-size manufacturers.
Surexport
October 26, 2026
•[ ransomware, manufacturing, retail ]
Surexport was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Other. Country: Spain. Website: surexport.es. surexport.es Surexport is the largest independent berry producer in Europe, founded in 1994 in Huelva, Spain, growing strawberries, raspberries, blueberries and blackberries across Spain, Portugal, the Netherlands, Morocco and Kenya. Owned since 2020 by Alantra Private Equity, the group is valued at around 600 million euros with revenue approaching 400 million and over 2500 employees. Its competitive edge is exclusive berry varieties developed with US genetics partner Plant Sciences since 2007, sold under the Doarosa, Berry Sensations and Fruhi brands. Major clients include Tesco, Lidl, Mercadona and Sainsbury's, with 80 percent of revenue from exports to Northern Europe. The company invested 200 million euros in acquisitions and secured a 250 million euro loan in 2025.
smithandcasady.com
October 15, 2026
•[ ransomware, manufacturing, energy ]
smithandcasady.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-10-15. Sector: Professional Services. Country: United States of America. Website: smithandcasady.com. Inside: a subcontract agreement and insurance requirements from general contractor Charles Perry Partners, Inc. (CPPI, Gainesville); commercial invoices for the export of insulation materials to the U.S. Virgin Islands (HOVENSA LLC, oil refinery, Christiansted); cost estimate sheets for FOAMGLAS, Armaflex, and aluminum jacketing covering dozens of projects from Tampa to Hollywood; bid proposals for the insulation of a Raytheon PCS classified facility, "Classified NE Operations A"; correspondence on the Raymond James Stadium project with Manhattan Construction and BCH Mechanical a dispute ove
Lawter
September 1, 2026
•[ ransomware, manufacturing ]
Lawter was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-09-01. Sector: Manufacturing. Country: United States of America. Website: lawter.com. Organization with 150 emails extracted. Domain: lawter.com
meccahighfeed.blogspot.com
September 1, 2026
•[ ransomware, manufacturing, technology ]
meccahighfeed.blogspot.com was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-09-01. Sector: Agriculture and Food Production. Country: Saudi Arabia. Website: meccahighfeed.blogspot.com. (Mecca High Feed Factory) is an Egyptian animal feed manufacturing compan...
Congressional Iron Works
September 1, 2026
•[ ransomware, manufacturing ]
Congressional Iron Works was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-09-01. Sector: Manufacturing. Congressional Iron Works is a full-service miscellaneous metals contractor serving the commerci
al construction industry in the greater Baltimore-Washington area. Established in 2004, the com
pany offers a range of services including estimating, drafting, fabrication, and project manage
ment, focusing on steel and architectural metals components such as structures, stairs, and can
opies.
We will upload 35gb of corporate data soon. Employee personal information (passport numbers, SS
Ns, DLs, financial information, health information), clients information, company financials, p
rojects, NDAs.
Algra Group
August 14, 2026
•[ ransomware, technology, manufacturing ]
Algra Group was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-08-14. Sector: Other. Country: Switzerland. Website: algragroup.ch. Algra Group specializes in customized input systems, front panels, and industrial labels, provi
ding tailored solutions for various industries. Their product range includes agnostic touch sys
tems, piezo keyboards, and weightpads, catering to sectors such as food processing, automation,
wellness, medical technology, and transportation.
We will upload corporate data soon. Employee personal information (passport numbers, DLs), clie
nts and partners information, contacts and agreements, financials, NDAs.
Multiver Ltée
September 1, 2026
•[ ransomware, manufacturing ]
Multiver Lte was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-09-01. Country: Canada. Multiver Lte specializes in the manufacturing of glass products, offering a range of solutions from sealed to tempered and shaped glass. With over 50 years of experience, the company is renowned for its craftsmanship and commitment to timely delivery. They have successfully completed various architectural projects, showcasing both subtle and bold designs. Their intended clients include those looking to enhance their construction with high-quality glass features.
PennFab
August 11, 2026
•[ ransomware, manufacturing ]
PennFab was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-08-11. Sector: Manufacturing. Country: United States of America. Website: pennfab.com. PennFab is a Pennsylvania-based steel manufacturing company specializing in structural steel fa
brication for various industries, including railroad and transportation. They offer a wide rang
e of services such as engineering, welding, and custom metal fabrication, ensuring high-quality
products made in the USA.
We will upload 40gb of corporate data soon. Employee personal information (scanned passports, D
Ls, SSNs and so on of 53 employees), clients information, contacts and agreements, financials,
NDAs.
Metales Panamericanos
September 1, 2026
•[ ransomware, leak, manufacturing ]
Metales Panamericanos was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-09-01. Sector: Manufacturing. Country: Panama. English Metales Panamericanos, previously known as ACERO PANAMA, is the main construction & steel supplier to the Construction industry in Panama, initially focus in steel materials, now our new mission is extended to different constructions systems, Electrical Solutions, Equipment & Devices, zing ceilings, strollers, metal wires, windows structures, gypsum, among others. Spanish Metales Panamericanos S.A. (METALPAN), previamente conocida como ACERO PANAMA, es una dinmica y exitosa sociedad 100% panamea que se constituyo como METALPAN en el ao 1991, y que ha sabido transformarse y crecer con firmeza para responder de manera rpida y eficaz a las exigencias del clientes con altos niveles de competitividad presentes en el mercado nacional.
SITES Medical
September 1, 2026
•[ ransomware, healthcare, manufacturing ]
SITES Medical was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-09-01. Sector: Healthcare. Country: United States of America. Website: sitesmedical.com. SITES Medical is a trusted partner for orthopedic implant companies, offering innovative orthopedic technologies and a rapid product concept-to-launch process. They provide comprehensive R&D services, including regulatory filings, and contract manufacturing capabilities to ensure high-quality products at reduced costs. Their expertise spans various markets, including orthopedic, spine, dental, and more, with a focus on enhancing product offerings through advanced technologies like OsteoSync Ti. SITES Medical collaborates closely with clients to integrate these technologies into their product lines, supporting their success in the competitive medical market.
The company headquarters is located in 4707 East Park 30 Drive, Columbia City, IN 46725, United States.
11-50 Employees
Manchester Airports Group
September 1, 2026
•[ ransomware, manufacturing ]
Manchester Airports Group was listed as a victim on the leak site of the fulcrumsec ransomware group; the attack is estimated to have taken place on 2026-09-01. Sector: Transportation. Country: United Kingdom of Great Britain and Northern Ireland. Website: magairports.com. [AI generated] Manchester Airports Group (MAG) is a UK-based airport operator and one of the largest in the United Kingdom. It owns and operates Manchester Airport, London Stansted Airport, and East Midlands Airport. Operating within the aviation and transportation infrastructure industry, MAG handles millions of passengers annually, providing terminal management, retail, and ground handling services across its portfolio of airports throughout England.
SCHMIDT
September 1, 2026
•[ ransomware, leak, manufacturing ]
SCHMIDT was listed as a victim on the leak site of the bravox ransomware group; the attack is estimated to have taken place on 2026-09-01. Country: United States of America. Website: schmidtmfg.com. Abrasive Blasting Systems and Engineering Solutions for Industry.
iwin
August 28, 2026
•[ ransomware, manufacturing, technology ]
iwin was listed as a victim on the leak site of the Black X ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Technology. Country: South Korea. Website: www.iwin.kr. This company is a manufacturer of car parts. We have obtained all of your company's technical data. (1TByte) If you do not contact us, all your data, including technical, sales, drawings, quality, logistics, and supply chain information, will be leaked.
Transportes Montejo S.A.S.
August 31, 2026
•[ ransomware, manufacturing ]
Transportes Montejo S.A.S. was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-08-31. Sector: Transportation. Country: Colombia. Website: www.transportesmontejo.com.
PT Intraco Penta Tbk
September 1, 2026
•[ ransomware, manufacturing ]
PT Intraco Penta Tbk was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2026-09-01. Sector: Manufacturing. Country: Indonesia. Website: intracopenta.com. Industrial Machinery & Equipment
specialtytextile.com
September 1, 2026
•[ ransomware, manufacturing ]
specialtytextile.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-09-01. Sector: Manufacturing. Country: United States of America. Website: specialtytextile.com. Specialty Textile Services is a U.S. textile services company founded in 1996, specializing in linen rental and processing for the hospitality industry. Headquartered in Phoenix, Arizona, with a branch in San Diego, California, the company employs between 201 and 500 people.
Serving mid-to-high-end restaurants, hotels, and other hospitality providers, Specialty Textile Services offers flexible rental programs covering a full line of linens, kitchen textiles, uniforms, and dust control products all delivered clean and ready for use. Key features include:
flexible pickup and delivery schedules, including multiple weekly service visits;
all-inclusive service pricing with no upfront investment required from customers;
an in-house commercial laundry facility operating 7 days a week, 365 days a year, with rapid emergency response available for special requests.
Asfaltos y Pavimentos S.A. (Asfalpasa)
September 1, 2026
•[ ransomware, manufacturing ]
Asfaltos y Pavimentos S.A. (Asfalpasa) was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-09-01. Sector: Manufacturing. Country: Spain. Empresa dedicada a la fabricacin, transporte y extendido de mezclas asflticas as como todo tipo de servicios relacionados con la construccin y mantenimiento de carreteras, vias pblicas y privadas. Desde sus comienzos en 1982 Asfaltos y Pavimentos (ASFALPASA) se basa en un equipo humano especializado y experimentado en la actividad que posteriormente llevara a cabo la empresa. Dicha experiencia aporta a la empresa un rpido crecimiento y un alto grado de especializacin y competitividad que hace de Asfalpasa una de las empresas ms conocidas de su sector.
