CULines (container shipping)
October 12, 2026
•[ ransomware, technology, manufacturing ]
CULines (container shipping) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: China. Container shipping China | Operational EDI message archives (booking and container manifest records) | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
Wolf & Sofsky GmbH
December 10, 2025
•[ ransomware, manufacturing ]
Wolf & Sofsky GmbH was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2025-12-10. Sector: Manufacturing. Country: Germany. Wolf & Sofsky GmbH is a construction company with a 75-year history, based in Zweibrcken, Germany. The company operates on highly complex projects and maintains a significant financial position.
Critical Information We Possess
Financial Data: Complete spectrum of financial information (reports, budgets, cost estimates), revealing project profitability, total revenue, cost structure, and financial stability of the company.
Commercial Information: Contracts with clients, commercial offers, contract terms these form the foundation of Wolf & Sofsky's competitive advantage.
Personal Data: Information about employees and clients (names, contacts, job titles, possibly salaries), which falls under GDPR legislation.
Technical Assets: Technical plans, project drawings, architectural solutions the company's unique intellectual property.
Strategic Plans: Business plans and strategic documents, revealing development directions, new markets, and future projects.
Merrill Iron & Steel
August 13, 2026
•[ ransomware, manufacturing ]
Merrill Iron & Steel was listed as a victim on the leak site of the payoutsking ransomware group; the attack is estimated to have taken place on 2026-08-13. Sector: Manufacturing. Country: United States of America. Website: merrillsteel.com.
Palma
October 6, 2026
•[ ransomware, manufacturing, leak ]
Palma was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Other. Country: United States of America. Website: palmainc.com. palmainc.com zoominfo.com/c/palma-inc/344828237 Palma, Inc. is a private, family-owned epoxy flooring manufacturer and installer founded in 1927 in Whippany, New Jersey now in its third generation (CEO Fred Palma III). It generates estimated annual revenue of $2542M with only ~1015 direct employees (heavy use of subcontractors), completing millions of square feet of industrial flooring over 99 years. The company is a rare single-source formulator/applicator it develops its own products (PalmaLite, PaliKrete, PaliFlake) and installs them, with every square meter personally approved by a family member. Its average project size is $15.3M (Procore data: 122 projects, 76 active simultaneously), serving auto dealerships, jails, hospitals, chemical plants, and government facilities across the U.S. and Canada. Key differentiators: 5-year industry-leading warranty, no membrane required (3040% cost savings), and full ASTM C722-89 compliance. The company's name "A Palma, Manton, Palma Co
Machine sro
October 6, 2026
•[ ransomware, manufacturing, automotive ]
Machine sro was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Manufacturing. Country: Czechia. Website: k2machine.cz. k2machine.cz zoominfo.com/c/machine-sro/537154777 K2 Machine s.r.o. is a private Czech industrial machinery manufacturer founded in 2011 in Pardubice, Czech Republic, growing from 3 founders in a small office to ~2550 employees and 400+ completed projects over 15 years. Annual turnover is 100+ million CZK (~4M), though 2024 saw a sharp 18.7% revenue decline (operating revenue 27.7%). The company designs and builds special-purpose machines, automated production lines, robotic cells (including 3D Bin Picking), conveyor systems, and performs CNC machining, equipment repowering, and line relocation serving primarily the automotive and consumer industries. Its full-cycle capability spans Solid Edge 3D design, EPLAN electrical engineering, CNC production, assembly, commissioning, and after-sales service under one roof at its own Semtn campus (since 2020).
Refako Autodele
October 6, 2026
•[ ransomware, manufacturing, retail ]
Refako Autodele was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Manufacturing. Country: Denmark. Website: refako.dk. refako.dk REFAKO ApS (Refako Autodele) is a Danish family-owned truck and trailer parts retailer founded in 1975 in Odense, Denmark, celebrating its 50th anniversary in 2025. It operates 13 stores nationwide with 200,000+ SKUs (290,000 for B2B) and employs 5970+ people. Annual gross profit is ~2627M DKK (~$3.7M), but the company has been loss-making for 6 consecutive years (20202025), with equity saved by owner injections (16.3M DKK in 2025) after hitting a crisis low of 2.7M in 2022. It turned operationally profitable in 2024 (+0.46M DKK) under new sole owner Klaus Allan Jrgensen (KJ Holding took 100% in May 2024), but slipped back into losses in 2025. Refako is Denmark's only authorized SAF-Holland partner (global leader in trailer axles/suspension) and carries premium brands like WABCO, Knorr-Bremse, JOST, Dinex, and Exide. Customer reputation is excellent Trustpilot 4.8/5 from 2,695 reviews with same-day shipping and 30-minute Click & Collect across its store network.
Kooltronic
October 6, 2026
•[ ransomware, manufacturing, technology ]
Kooltronic was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Manufacturing. Country: United States of America. Website: kooltronic.com. kooltronic.com Kooltronic, Inc. is a private, family-owned manufacturer of enclosure cooling products (air conditioners, heat exchangers, fans) founded in 1956 in Princeton, NJ, now based in Pennington, NJ on a 170,000 sq ft facility powered by 90% solar energy. Owned by the Freedman family since 1970 (President: Barry Freedman), the company generates estimated annual revenue of $3545M with 5887 employees (~$650K$750K revenue per employee very high for a manufacturer). Kooltronic invented the world's first closed-loop enclosure air conditioner in 1967 and holds a US patent for Hazardous Location AC systems (NEC Class I Div 1&2), giving it a unique market niche. It offers the industry's widest range 2,00030,000 BTU/H units across all NEMA ratings with 100% in-house production, UL-certified testing labs, and ISO 9001:2015 certification. The company is women-owned (WBE) (CEO Anne Freedman), holds $20.5M in 401(k) assets (stable finances), and is expanding into fast-growing BESS
Aquatech
October 6, 2026
•[ ransomware, energy, technology ]
Aquatech was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Energy & Utilities. Country: United States of America. Website: aquatech.com. aquatech.com zoominfo.com/c/aquatech-international-llc/2523742 Aquatech International Corporation is a private water treatment technology company founded in 1981 and headquartered in Canonsburg, Pennsylvania, with operations in 26 countries and 1,000+ projects across 60+ countries. It generates estimated annual revenue of $105165M and employs 9001,368 people globally (growing +31% per year). Aquatech is the world's leading Zero Liquid Discharge (ZLD) provider (160+ installations) and a major desalination player its Corpus Christi, Texas plant (30 MGD) will be the third-largest SWRO facility in the Americas. The company won the prestigious "Water Technology Company of the Year 2025" (Global Water Awards) and acquired three companies in 2025 (Century Water, Koch Li-Pro DLE, FTS H2O) to dominate lithium extraction (PEARL platform) and ultrapure water for semiconductors. Led by CEO Devesh Sharma and President/CTO Ravi Chidambaran, with a private equity investor entering in 2025.
fleetworksinc.com
October 9, 2026
•[ ransomware, manufacturing ]
fleetworksinc.com was listed as a victim on the leak site of the threeam ransomware group; the attack is estimated to have taken place on 2026-10-09. Sector: Transportation. Country: United States of America. Website: fleetworksinc.com. Fleetworks Inc. offers comprehensive heavy-duty truck repair and fleet services across California, with locations in Oakland, Santa Fe Springs, and Riverside. Their skilled team specializes in a wide range of services including diesel repair, flee
dwi-bau.de
October 9, 2026
•[ ransomware, manufacturing ]
dwi-bau.de was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-10-09. Sector: Other. Country: Germany. Website: dwi-bau.de. The company specializes in building systems for metal roofs and facades, serving customers in the construction and building sectors. Its
KOIKE Sanso Kogoyo Co. Ltd.
October 10, 2026
•[ ransomware, manufacturing ]
KOIKE Sanso Kogoyo Co. Ltd. was listed as a victim on the leak site of the exitium ransomware group; the attack is estimated to have taken place on 2026-10-10. Sector: Manufacturing. Country: Japan. Website: koike-asia.com. Website: koike-japan.com
You have time until Tuesday(10.13.2026). If you wouldn't contact us we will start selling data.
We have 5.8 TB of data:
agreements
confidential data
correspondence files
all customers and clients data
engineering drawings
AND MUCH MORE...
Contact us until your time runs out.
HYSYTECH S.r.l.
October 2, 2026
•[ ransomware, manufacturing, technology ]
HYSYTECH S.r.l. was listed as a victim on the leak site of the Majinahanashi ransomware group; the attack is estimated to have taken place on 2026-10-02. Sector: Manufacturing. Country: Italy. HYSYTECH S.r.l. is an Italian engineering and technology company that designs and builds industrial processing plants, specifically systems for the production and processing of hydrogen, biomethane...
PCA Group Sdn. Bhd.
August 21, 2026
•[ ransomware, manufacturing ]
PCA Group Sdn. Bhd. was listed as a victim on the leak site of the Majinahanashi ransomware group; the attack is estimated to have taken place on 2026-08-21. Sector: Other. Country: Malaysia. PCA Group is a Malaysian industrial, engineering, and manufacturing company founded in 1989 that designs, manufactures, installs, and maintains infrastructure and equipment for major international...
ETICOD
August 9, 2026
•[ ransomware, manufacturing, technology ]
ETICOD was listed as a victim on the leak site of the Majinahanashi ransomware group; the attack is estimated to have taken place on 2026-08-09. Country: Poland. Website: eticod.pl. Eticod is a family-run, prominent label printing house based in Katowice, Poland, founded in 1994. It specializes in self-adhesive labels, barcodes, thermal transfer ribbons, and advanced packaging...
TQC S.A.
October 11, 2026
•[ ransomware, manufacturing ]
TQC S.A. was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-10-11. Sector: Manufacturing. Country: Peru. Website: tqc.com.pe. (A release of 750 GB of data, compressed into archives for convenience.) TQC Tecnologa Qumica Comercio S. A. specializes in providing high-quality solutions for the agricultural, veterinary, and environmental health sectors, promoting sustainable agriculture. The company aims to support the development and well-being of these sectors by offering a wide range of products tailored to their needs. With a commitment to excellence, TQC seeks to be a leading provider in Peru and other markets in South America. They work closely with farmers to exceed expectations and contribute to community growth.
Spelman Logistics
October 11, 2026
•[ ransomware, technology, manufacturing ]
Spelman Logistics was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-10-11. Sector: Transportation. Website: spelmanlogistics.com. Dear Spelman Logistics,
We are now in possession of 1.2M contact records (emails and phone numbers), 245K carrier profiles complete with EIN and SSN, 57K bank accounts including routing numbers, 334K live document URLs, and 4.5M carrier registry entries pulled from your MVMNT TMS.
Your exposure extends well beyond your own walls. We have also reached into the systems of your partners, including:
ALG Canada Inc
Line Transportation Inc
Maverick Acquisition Ventures Inc
Reliable Freight Solutions
Rhode Sense
and more.
If you would rather not have us contact your partners and make life difficult for your employees, we suggest you pay the following: $500,000 in BTC or XMR.
You will shortly receive an email explaining how to reach us. If that fails, contact us at:
Email: emperadorlol@proton.me / xdlmfao@morke.ru
Session: 05651c7323273b723588d47455471ee9e27feb5187a30f2933554a705aacb38358 [Sector: Manufacturing, Transportation]
KP Industries
July 23, 2026
•[ ransomware, manufacturing, leak ]
KP Industries was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-07-23. Country: United Kingdom of Great Britain and Northern Ireland. Website: kp-i.co.uk. [AI generated] N/A
I don't have verified, reliable information about a specific company named "KP Industries." This is a generic-sounding business name that could refer to multiple unrelated companies across different industries and countries, and I cannot confirm details for any specific entity without risking inaccurate or fabricated information.
EUSU Logistics (logistics operations)
October 12, 2026
•[ ransomware, leak, manufacturing ]
EUSU Logistics (logistics operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: South Korea. Logistics South Korea | Internal infrastructure configuration and assessment records | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
Dongkuk Steel (steel manufacturing)
October 12, 2026
•[ ransomware, manufacturing, financial ]
Dongkuk Steel (steel manufacturing) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Manufacturing. Country: South Korea. Steel manufacturing South Korea | Internal financial systems material (invoice and settlement records) | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
Superterminais (port terminal operations)
October 12, 2026
•[ ransomware, manufacturing ]
Superterminais (port terminal operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: Brazil. Port terminal operations Brazil | Operational EDI archives and interface operational records | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
