Asyaport (container terminal operations)
October 12, 2026
•[ ransomware, leak, manufacturing ]
Asyaport (container terminal operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: Turkey. Port terminal operations Turkey | Dangerous-goods operational records and internal database scripts | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
PennEastern Architects LCC
October 12, 2026
•[ ransomware, manufacturing, financial ]
PennEastern Architects LCC was listed as a victim on the leak site of the Dark Project ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Professional Services. Country: United States of America. Website: penneastern.com. About PennEastern Architects LCC The principals of PennEastern Engineers, LLC are Paul Pasonick, Andrew Pasonick, Michael Amato and Daryl Pawlush. All principals have extensive experience in commercial and residential land developments, municipal projects, sanitary sewer projects, storm water projects, pavement projects, flood control projects and soil erosion and sedimentation control plans. In addition, each has assisted in design, specification writing, cost estimating, project bidding and bid review, construction observation and project management of the various projects. The Principals of PennEastern Architects, LLC are Andrew Pasonick, Emil Jarolen and Norman Manovsky. Design Principal Emil Jarolen has been practicing Architecture since 1974 and has been a Registered Architect in the State of Pennsylvania since 1978. As a result of a cyberattack on Company PennEastern Architects, more than 100 GB of corporate data was stolen. The breach includes a large volume of confidential information, including drawings and project documentation, data on the companys customers and employees, as well as documents containing banking and financial information. Currently, approximately 60,000 files are unprotected by Company PennEastern Architects.
Aeroklas Duys / Duys Engineering Group
October 12, 2026
•[ ransomware, manufacturing, automotive ]
Aeroklas Duys / Duys Engineering Group was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Manufacturing. Country: South Africa. Website: aeroklasduys.co.za. Aeroklas Duys (Pty) Ltd a specialized automotive manufacturing company It was formed as a strategic joint venture between the Duys Engineering Group and Aeroklas (a prominent global automotive accessory manufacturer owned by the Eastern Polymer Group of Thailand). Duys Engineering Group an industrial and mechanical engineering firm founded in South Africa in 1960.
Gatetech Technology
October 12, 2026
•[ ransomware, technology, manufacturing ]
Gatetech Technology was listed as a victim on the leak site of the Orova ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Technology. Country: Taiwan. Website: www.gatetech.com.tw. Gatetech have dedicated light metal casting industry for over 20 years, be able to offer one stop service from casting till assemble in house for aluminum alloy and magnesium alloy both raw materials, major casting machines imported from Europe. USA and Japan, such as Toshiba, Toyo, Frech, Bulher.
Culinary Specialties
October 13, 2026
•[ ransomware, manufacturing ]
Culinary Specialties was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-10-13. Sector: Agriculture and Food Production. Country: United States of America. Website: www.culinaryspecialties.net. United States
Saddlers Court MFG
October 13, 2026
•[ ransomware, manufacturing ]
Saddlers Court MFG was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-10-13. Sector: Manufacturing. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.saddlerscourtmfg.com. United States
Mäntelhaus Kaiser GmbH & Co. KG
July 21, 2026
•[ ransomware, manufacturing, leak ]
Mntelhaus Kaiser GmbH & Co. KG was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-07-21. Sector: Manufacturing. Country: Germany. Website: maentelhaus-kaiser.de. [AI generated] N/A
I don't have reliable, verifiable information about a company called "Mntelhaus Kaiser GmbH & Co. KG" in my knowledge base. Rather than provide fabricated details about its operations, industry specifics, or founding history, I'm flagging this as unverifiable. If you have source material or context about this company, please share it and I can help analyze or summarize that information instead.
Camandona SA
August 4, 2026
•[ ransomware, manufacturing ]
Camandona SA was listed as a victim on the leak site of the Majinahanashi ransomware group; the attack is estimated to have taken place on 2026-08-04. Country: Switzerland. Website: camandona.ch. Camandona SA is a major Swiss construction and road-building company founded in 1948 and based in the French-speaking canton of Vaud. It specializes in asphalt paving, road construction, civil engi...
BKH ICD (inland container depot operations)
October 12, 2026
•[ ransomware, manufacturing, hack ]
BKH ICD (inland container depot operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: South Korea. Inland container depot South Korea | Commercial invoice records and systems release documentation | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
BMT IQ (marine surveying and inspection)
October 12, 2026
•[ ransomware, leak, manufacturing ]
BMT IQ (marine surveying and inspection) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: United Kingdom of Great Britain and Northern Ireland. Marine surveying United Kingdom | Commercial e-invoice records and equipment interchange receipts | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
ZPMC (port machinery and terminal engineering)
October 12, 2026
•[ ransomware, leak, manufacturing ]
ZPMC (port machinery and terminal engineering) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Manufacturing. Country: China. Port machinery / engineering China | Operational EDI archives and cargo loading records | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
Pedigo Products, Inc.
October 12, 2026
•[ ransomware, manufacturing, healthcare ]
Pedigo Products, Inc. was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Manufacturing. Country: United States of America. Website: https:pedigo-usa.com. Pedigo Products, Inc. is a privately held American manufacturer of stainless steel and chromium medical equipment for the healthcare industry. It disregards its own security, as well as that of its customers and employees, and makes no attempt to negotiate agreements to prevent data leaks. As a result, we provide you with 1.3 TB of sensitive corporate data, such as: carrier account numbers, customer-specific pricing, commission adjustments, customs/MDEL identifiers and customer/employee contact information, customer contracts, price and discount schedules, shipping and routing instructions, employee and customer personal data, FDA quality records (DMR, DHR, DHF, CAPA, complaints, MDR), CAD files and trade secrets, intellectual property and non-disclosure agreements, financial statements, tax returns, payroll records, bank details, and legal documents. Contractual obligations to customers and confidentiality, as well as HIPAA/GDPR/CCPA/PIPEDA regulations, were violated. We urge the authorities to pay attention to these issues. Due to Pedigo's negligence, it will also suffer losses in the form of loss of trade secrets and intellectual property protection, copying by competitors, loss of business with hospitals and dealers, and serious reputational and financial damage.
Briab Group AB
October 13, 2026
•[ ransomware, manufacturing, hack ]
Briab Group AB was listed as a victim on the leak site of the Wallstreet ransomware group; the attack is estimated to have taken place on 2026-10-13. Country: Sweden. [AI generated] N/A
I don't have reliable, verified information about a specific company called "Briab Group AB." Rather than provide potentially fabricated details about its operations, industry specifics, or founding information, I'm indicating this as unknown to avoid generating inaccurate threat intelligence. If you have source material or additional context about this company, please share it and I can help analyze it.
Company #73
October 15, 2026
•[ ransomware, technology, manufacturing ]
Company #73 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-15. Semiconductor manufacturing California, USA | [PENDING EXPOSURE]
Campbell Rhea
October 14, 2026
•[ ransomware, manufacturing, education ]
Campbell Rhea was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Country: United States of America. Website: campbellrhea.com. campbellrhea.com Campbell Rhea US manufacturer of laboratory and educational casework legal entity Institutional Casework, Inc. (ICI) with roots to 1951 in Paris, TN. The brand survived a 2005 tornado that destroyed its former parent Mohon International, was relaunched by local investors in 2006 (CEO Jim Arthurs ever since), and acquired Jamestown Metal Products (NY) plus a steel plant in Union City, TN 650,000 sq ft of manufacturing total. Products: wood/steel/stainless lab casework, ISOLATOR fume hoods, countertops, athletic lockers (Olympian), Patriot tables certified SEFA-8, FSC, AIA CES. Revenue $32.1M (2025) per FDMC 300, down from a $63.5M COVID-era peak (2022); ~250 employees, 35+ US dealers, projects at Penn State, UC Davis, Vanderbilt, Case Western, U of Missouri.
Adams Warehouse & Delivery, Inc.
October 16, 2026
•[ ransomware, leak, manufacturing ]
Adams Warehouse & Delivery, Inc. was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-10-16. Sector: Transportation. Country: United States of America. Website: Adams Warehouse & Delivery, Inc.. Adams Warehouse & Delivery, Inc. a family-owned freight and logistics company operating 11 warehouse facilities in the Houston metro area since 1976.
The dataset includes complete server backup mirrors from multiple drives (D:, E:, Data, Network Shares), capturing the company's entire digital footprint:
Sage/Peachtree accounting system for 8 entities spanning FY2007FY2025+, containing payroll, AR, AP, general ledger, and W-2 filing histories
5272 Social Security Numbers with full identity packages (name, DOB, address, phone, emergency contacts, health insurance IDs) across 4 entities
Domain administrator passwords saved in 4 RDP files, plus plaintext VPN credentials, WiFi passwords, and 18 database connections with blank passwords
WDS source code the company's custom warehouse distribution management system (VB6/.NET, multiple versions)
20+ years of customer data rate cards, operations logs, and contact lists for 100+ warehouse customers including Honeywell, Hospira, Amway, and Kaiser
Medical clinic employee data South Main Medical Clinic's bookkeeping within the Sage system, including physician SSN
11 Outlook PST email archives (largest: 1.5 GB)
Company #71
October 16, 2026
•[ ransomware, manufacturing ]
Company #71 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-16. Country: United States of America. manufacturing USA | [PENDING EXPOSURE]
New Tec Tool Limited
October 16, 2026
•[ ransomware, manufacturing ]
New Tec Tool Limited was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-10-16. Sector: Manufacturing. Country: Hong Kong. Website: www.newtectool.com. Canada
Chugoku Bend
October 17, 2026
•[ ransomware, manufacturing ]
Chugoku Bend was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-10-17. Sector: Manufacturing. [AI generated] N/A
I don't have reliable, verifiable information about a company specifically named "Chugoku Bend." This does not correspond to a company I can confidently identify in my knowledge base. If you have additional contextsuch as an alternate spelling, parent company, industry sector, or locationI would be glad to help clarify or research further based on that information.
merkezilac_archives
October 13, 2026
•[ ransomware, healthcare, manufacturing ]
merkezilac_archives was listed as a victim on the leak site of the HYFLOCK ransomware group; the attack is estimated to have taken place on 2026-10-13. Sector: Other. Country: Turkey. Website: merkezilac.com. It is not a retail pharmacy, but a well-known large-scale comprehensive pharmaceutical and hygiene/disinfection product manufacturer with nearly a century of history. Heres a detailed introduction about the company: Company Background and Scale Founded: Established in 1934, it is one of the oldest local pharmaceutical factories in modern Turkey, with 100% Turkish capital. Production Base: Its modern central laboratory and factory are located in ekmeky, Istanbul, Turkey, with high-standard closed production workshops covering an area of 7,000 square meters. Certification Standards: Production is fully supervised by the Turkish Ministry of Health (T.C. Salk Bakanl) and has passed a series of international certifications including cGMP (current Good Manufacturing Practice), cGLP (Good Laboratory Practice), ISO 9001, and ISO 13485 (Medical Device Quality Management System). Core Products and Business Merkez la follows its iconic slogan #salkiinhijyenart (Hygiene is a prerequisite for health) and is the leader in Turkey for first aid, skin care, and disinfection products, with the most complete product categories and extremely high market share: 1. Disinfection and Anti-infection Series (core products): Produces various professional and consumer skin disinfectants, hand sanitizers, anti-infection foams, surgical wipes, and wound cleansers (common brands include Opakjel and sosol series). 2. Over-the-Counter (OTC) Medicines and Ointments: Produces skin ointments and creams, such as htamol ointment, Starbaz cream, sosol ointment, Vitamin E, and baby diaper rash cream (Piik Kremi) for skin care, burns, and eczema. 3. First Aid and Medical Consumables: It is the first and only company in the Turkish pharmaceutical industry to legally produce standardized first aid kits (Hzr medical kits, covering earthquakes, home, car, and industrial scenarios) and household/commercial medicine boxes. 4. Contract Manufacturing (CMO): In addition to its own brand, it also manufactures tablets, capsules, sprays, drops, liquids, and semi-solid ointments for over 50 global and local pharmaceutical companies. Industry Influence The companys service network is extremely extensive, directly supplying products to over 3,000 local pharmacists and more than 9,500 hospitals and clinics in Turkey, and exporting to multiple overseas countries. In international humanitarian aid (such as Red Crescent supplies and earthquake donations), it is also a major provider of medical supplies and surgical/first aid consumables in Turkey.
