LifeFone
October 29, 2026
•[ ransomware, healthcare, manufacturing ]
LifeFone was listed as a victim on the leak site of the Booba Project ransomware group; the attack is estimated to have taken place on 2026-10-29. Sector: Healthcare. Country: United States of America. Website: www.lifefone.com. Medical Equipment Manufacturing Stolen data: Less than 1 GB.
IT Foods Industries
October 29, 2026
•[ ransomware, manufacturing ]
IT Foods Industries was listed as a victim on the leak site of the Shiba ransomware group; the attack is estimated to have taken place on 2026-10-29. Sector: Agriculture and Food Production. Manufacturing
FrenchCreek Production
October 30, 2026
•[ ransomware, manufacturing, leak ]
FrenchCreek Production was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Energy & Utilities. Country: United States of America. FrenchCreek Fall Safety specializes in manufacturing high-quality fall protection equipment. Th
eir product range includes harnesses, lanyards, self-retracting lifelines, and comprehensive sa
fety systems for various applications, including confined space entry and rescue.
We will upload 40gb of corporate data soon. Detailed employee information (phones numbers, addr
esses and so on), contracts and agreements, client and partners information, financials, specif
ications and so on.
Cipsa Industrias Sa De Cv
October 30, 2026
•[ ransomware, manufacturing, financial ]
Cipsa Industrias Sa De Cv was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Manufacturing. Country: Mexico. Cipsa Industrias Sa De Cv Compania Industrial Papelera Poblana, S.A. de C.V. (CIPPSA) and Tubos y Empaques de Puebla, S.A. de C.V. (TEPSA / KJAS TEPSA), a Mexican corrugated cardboard, packaging and paper-tube manufacturer. Complete employee HR records: names, dates of birth, home addresses, phone numbers, personal and corporate email addresses, CURP, RFC, IMSS numbers, salaries and employee badge photographs.Payroll records, tax data, fiscal validation files and HSBC payroll-bank files containing employee account and CLABE data.Information showing executive compensation through an **honorarios** arrangement outside the regular payroll system.Financial and industrial reports, sales/procurement/payroll budgets, production costs, operational analytics, invoices and accounting records.Customer complaint records and overdue receivables data.Occupational-safety, psychosocial-risk, industrial-incident and hazardous-waste documentation. More
Louisiana Crane & Construction
October 30, 2026
•[ ransomware, manufacturing ]
Louisiana Crane & Construction was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Manufacturing. Country: United States of America. Website: la-crane.com. A construction management company.
Bi Link
October 31, 2026
•[ ransomware, manufacturing, technology ]
Bi Link was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-31. Country: United States of America. Website: bi-link.com. bi-link.com Revenue $380.2 Million Bi-Link US precision manufacturer founded in 1961 (HQ Bloomingdale, IL), making metal stampings and injection-molded plastics with in-house tooling and assembly for automotive, medical, wireless, and consumer electronics OEMs. It owns plants in Shanghai, Nanning, Mexico (Jurez), and a new Vietnam site (2024), offering prototype-to-production under one roof. Revenue isn't reliably public broker estimates range wildly from ~$10M to $50M, but a TaiPEX filing suggests ~$5M+/month after consolidation. The critical development: in October 2025 family owners agreed to sell the company to Taiwan-listed Donpon Precision, closed and consolidated from Jan 2026. Despite the site still claiming "family-owned", control is now Donpon's, and long-time CEO Tom Harris has exited. Certifications (ISO 9001, ISO 13485, IATF 16949) support real OEM work (e.g. Teleflex via a 3D Systems case)
Cherry Bekaert
October 28, 2026
•[ ransomware, leak, manufacturing ]
Cherry Bekaert was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-28. Sector: Professional Services. Country: United States of America. Website: cbh.com. cbh.com Revenue $446.7 Million CBH Group Australia's largest grain cooperative, founded in 1933 in Perth and owned by over 3,700 farmer shareholders across Western Australia. It operates the world's largest grain export network with around 200 receival sites, 20 million tons of storage capacity and four export terminals at Kwinana, Albany, Geraldton and Esperance. Each year it handles approximately 20 million tons of grain and exports 15 to 17 million tons, mainly wheat, barley and canola to Asia, the Middle East and beyond. Led by CEO Brendan White, it has invested over 2 billion dollars in infrastructure modernization including rail upgrades, solar energy and digital platforms like the CBH App. The cooperative is financially strong with a BBB credit rating and returns profits to farmers through patronage dividends. It operates its own rail fleet of 360 wagons, runs quality testing laboratories at every site and is expanding port capacity to load Panamax vessels at Kwinana and Albany.
SK Capital Partners
October 28, 2026
•[ ransomware, financial, manufacturing ]
SK Capital Partners was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-28. Sector: Financial Services. Country: United States of America. Website: skcapitalpartners.com. skcapitalpartners.com Revenue $63 Million SK Capital Partners is a New York-based private equity firm founded in 2007 as a spinoff from Apax Partners, managing approximately 10 billion dollars across 60 plus investments in specialty chemicals, pharmaceuticals and ingredients. Led by co-founder Barry Siadat, it targets control investments in companies with 100 million to 1 billion dollars in revenue and has built platforms like Advansix, Sartomer and Cura Particles through buy-and-build strategies. Its portfolio companies employ over 12,000 people and generate more than 5 billion dollars in annual revenue. Recent deals include the July 2026 acquisition of Lorama Group and the October 2026 purchase of Vesuvius Americas refractory assets. Key strengths are deep sector expertise in real-economy industrial businesses and proven IPO and trade sale exits.
Mann Group
October 26, 2026
•[ ransomware, manufacturing, energy ]
Mann Group was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Manufacturing. Country: Australia. Website: manngroup.com.au. manngroup.com.au Mann Group is an Australian multi-disciplinary engineering and construction company founded in 1992 in Sydney, operating through eight subsidiaries including Mechtronic Engineering, Mann Fab, Mann Energy, Mann Enviro and Mann Solar. With 350 plus employees, it is Australia's leading provider of thermal, electrical, environmental and sanitary engineering solutions. The group covers pipe fabrication, structural steel, pressure vessels, industrial boilers, HVAC, waste-to-energy and renewable energy systems. Its headquarters and central workshop are located in Milperra, Sydney, with a financial year ending in June.
Lydenburg Toyota
October 26, 2026
•[ ransomware, retail, manufacturing ]
Lydenburg Toyota was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Retail & E-Commerce. Country: South Africa. Website: lydenburg.toyota.co.za. lydenburg.toyota.co.za Lydenburg Toyota is a Toyota dealership in Lydenburg (Mashishing), Mpumalanga, South Africa, part of the Toyota South Africa Motors dealer network selling new Toyota and Lexus vehicles, certified used cars, service, parts and financial services. The town is also home to Toyota SA Manufacturing, the largest Toyota plant in Africa, assembling Hilux, Fortuner and Corolla Cross with engines and components exported to over 40 countries including the United States. Toyota SA Motors holds 24.2 percent of the South African vehicle market and exported 187 billion rand in FY2023, with 8500 direct employees across its plants. The company invested 2.43 billion rand in hybrid technology and is developing a 2.2 billion dollar Mbombela megaproject including housing, schools and hospitals around the Lydenburg plant. Corolla Cross production from Lydenburg began exports to the US in April 2024.
WIKA Beton
October 26, 2026
•[ ransomware, manufacturing, government ]
WIKA Beton was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Manufacturing. Country: Indonesia. Website: wika-beton.co.id. wika-beton.co.id WIKA Beton (PT Wijaya Karya Beton Tbk) is Indonesia's largest precast and prestressed concrete manufacturer, founded in 1997 and listed on the Indonesia Stock Exchange since 2014 as part of state-owned Wijaya Karya group. It operates over 20 production plants across Indonesia from Java to Papua, producing more than 189 types of concrete products including bridge girders, piles, culverts and railway sleepers. Revenue is estimated at around 5.3 trillion rupiah with a market cap of 1.9 trillion, offering a 3.5 percent dividend yield and trading well below book value. The company is a primary supplier for Indonesia's massive infrastructure boom including toll roads, the Jakarta-Bandung high-speed railway and new port construction. Led as a state-owned enterprise, it benefits from priority access to government contracts and a unique nationwide plant network.
Holcim
October 31, 2026
•[ ransomware, manufacturing ]
Holcim was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-10-31. Sector: Manufacturing. Country: Switzerland. Holcim is a global building-materials and building-solutions company founded in Switzerland in 1912. It provides cement, aggregates, ready-mix concrete and high-value building solutions for infrastructure, buildings and industrial applications. Holcim focuses on sustainable construction through solutions such as ECOPact, ECOPlanet and ECOCycle. In 2025, the company generated CHF 15.7 billion in net sales and operated across 43 markets. [Sector: Manufacturing, Construction]
hccd-construction.com
September 1, 2026
•[ ransomware, manufacturing ]
hccd-construction.com was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-09-01. Sector: Manufacturing. Country: United States of America. Website: hccd-construction.com. The Holding Company for Construction and Development (HCCD) is an Egyptian public holding company (Egyptian Holding Stoc...
Fortrex
October 28, 2026
•[ ransomware, manufacturing ]
Fortrex was listed as a victim on the leak site of the Wallstreet ransomware group; the attack is estimated to have taken place on 2026-10-28. Sector: Manufacturing. Country: United States of America. Website: fortrexsolutions.com. Fortrex is the premier provider of food safety solutions in North America, offering comprehensive sanitation services, chemical products and intervention solutions for food processing facilities. Our team of skilled food sanitors, microbiologists, technical experts and engineers are committed to keeping USDA, FDA, and CFIA processing facilities clean, safe, and audit-ready
Proterial
October 29, 2026
•[ ransomware, manufacturing ]
Proterial was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-29. Sector: Manufacturing. Country: Japan. Website: www.proterial.com.
Service One Transportation
October 30, 2026
•[ ransomware, manufacturing ]
Service One Transportation was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Transportation. Service One Transportation, Inc. is a trucking and logistics company based in Wisconsin, offeri
ng a wide range of transportation services including Over the Road, Regional, and Refrigerated
truckload services.
We will upload 5gb of corporate data soon. Detailed employee information (passports, SSN number
s, tax ID numbers and much more), lots of contracts and agreements, client information, detaile
d financials, NDA and so on.
Hudson & Hudson Sign Products
October 30, 2026
•[ ransomware, manufacturing, financial ]
Hudson & Hudson Sign Products was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Manufacturing. Country: United States of America. Hudson & Hudson is a second generation sign company, located in the heart of Houston. From its
humble beginnings, in the back of a garage near downtown Houston, it has grown to one of the pr
emier sign manufacturing facilities in the US.
We will upload 14gb of corporate data soon. Employee information, contracts and agreements, cli
ent information, financials, drawings and so on.
Rapid Manufacturing
October 30, 2026
•[ ransomware, espionage, manufacturing ]
Rapid Manufacturing was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Manufacturing. Website: Rapid Manufacturing. [manufacturer] Rapid Manufacturing a 50-year-old electronics contract manufacturer in Anaheim, California with operations in Ensenada, Mexico.
Rapid Manufacturing is not a household name. But it is a critical Tier-1 supplier to SpaceX (Falcon & Starship programs), Anduril, Northrop Grumman, Rocket Lab, L3Harris, Collins Aerospace (RTX), and Millennium Space (Boeing). It builds the wire harnesses, electro-mechanical assemblies, and box builds that go inside rockets, missiles, and satellites.
The exposed material includes:
>
ITAR-controlled engineering drawings and manufacturing processes for Falcon 9/Heavy, Starship, and Draco propulsion systems RTD soldering acceptance criteria, visual inspection standards, cable thermocouple assemblies, and production master plans.
26 ITAR customer quoting accounts including SpaceX, Anduril, Northrop Grumman, Rocket Lab, L3Harris, Collins Aerospace, and Millennium Space the complete defense/space revenue architecture.
6001,200 employee records spanning US (SSN, bank accounts, payroll, I-9/immigration) and Mexico (RFC, CURP, IMSS, bank accounts, nminas) with data from 2019 through August 2026.
Attorney-client privileged materials settlement agreements, severance terms, internal investigation files, and a recorded termination meeting (audio).
Palletline
October 30, 2026
•[ ransomware, manufacturing ]
Palletline was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Transportation. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.palletline.co.uk.
Honghwa International
October 30, 2026
•[ ransomware, manufacturing ]
Honghwa International was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Manufacturing. Country: Taiwan. Website: www.honghwa.com.tw.
