Ciftay Insaat Taahhut Ve Ticaret Anonim Sirketi
October 6, 2026
•[ ransomware, manufacturing ]
Ciftay Insaat Taahhut Ve Ticaret Anonim Sirketi was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Manufacturing. Country: Turkey. Website: www.ciftay.com.tr.
harborpacific.com
October 6, 2026
•[ ransomware, manufacturing ]
harborpacific.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Transportation. Country: United States of America. Website: harborpacific.com. Harbor Pacific Contractors, Inc. specializes in Industrial, Mechanical, and Heavy Civil Construction Services in the Pacific Northwest. Their offerings include wastewater and water treatment facilities, transportation infrastructure, pump stations, and power generation facilities. The company serves clients in Washington, Oregon, and Alaska, focusing on large-scale construction projects. With a commitment to quality and efficiency, they cater to various industrial construction needs.
Employees: 20
Revenue: $5 Million
Phone Number: (425) 488-7131
acmestamping.com
October 6, 2026
•[ ransomware, manufacturing ]
acmestamping.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Manufacturing. Country: United States of America. Website: acmestamping.com. Acme Stamping & Wire Forming Co. specializes in metal stamping, CNC machining, precision wire forming, and tool & die services. They offer a range of capabilities including progressive blanking, deep draw, and single station compound processes. The company caters to clients requiring high-quality manufacturing solutions with advanced equipment and precision engineering. Located in Pittsburgh, PA, Acme Stamping & Wire Forming is equipped to handle various production needs.
Employees: 20
Revenue: $5 Million
Phone Number: (412) 771-5720
Danser
November 1, 2026
•[ ransomware, manufacturing ]
Danser was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-11-01. Sector: Other. Country: United States of America. Website: www.danserinc.com.
deom.be
November 2, 2026
•[ ransomware, manufacturing ]
deom.be was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-11-02. Country: Belgium. Website: deom.be. The company specializes in the distribution, installation, customization and maintenance of lifting equipment, truck-mounted cranes, forestry machinery and material-handling systems.
Laboratorios Roemmers SAICF
October 1, 2026
•[ ransomware, healthcare, manufacturing ]
Laboratorios Roemmers SAICF was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-10-01. Sector: Healthcare. Country: Argentina. Website: roemmers.com.ar. Laboratorios Roemmers SAICF Argentina's #1 pharmaceutical company by revenue, with 1.669 billion in consolidated turnover, 6,890 employees, and 69 subsidiaries across 11 countries.
The exposed material includes:
4,207 employees' national identity numbers (CUIL) Argentina's equivalent of a Social Security Number combined with dates of birth, health insurance affiliations, and employer identifiers. A complete identity-theft package for the entire Argentine workforce.
Psychotropic drug dispensing records employee-by-employee tracking of who receives clonazepam, alprazolam, diazepam, and other psychiatric medications from the company nursing station. The most sensitive category: mental health data.
COVID-19 health tracking with clinical symptoms individual symptom logs, doctor's notes, quarantine dates, and return-to-work clearances for employees who tested positive.
Pre-employment medical exam results with full DNI (national identity document) numbers.
82 GB of drug formulations the complete pharmaceutical IP portfolio covering every product Roemmers manufactures, from API synthesis methods to finished-form specifications.
193 MB of API supplier qualification dossiers for 30+ international suppliers including CERBIOS (Switzerland), revealing the entire supply chain.
14 GB of internal drug pricing strategy and competitive intelligence
Post Metal Recycling
October 1, 2026
•[ ransomware, manufacturing ]
Post Metal Recycling was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-10-01. Sector: Manufacturing. Country: United States of America. Post Metal Recycling specializes in buying scrap metal from businesses and individuals, offering both ferrous and non-ferrous recycling services. They provide on-site scales for accurate measurements and facilitate various recycling options including yard drop-off, roll-off service, and site clean-up. The company emphasizes the environmental benefits of recycling, such as energy conservation and resource preservation. With a commitment to honesty and excellent customer service, Post Metal Recycling aims to create jobs and generate income through their operations.
Inova Semiconductors GmbH
October 2, 2026
•[ ransomware, manufacturing, technology ]
Inova Semiconductors GmbH was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-02. Sector: Manufacturing. Country: Germany. Website: inova-semiconductors.de.
www.windor.com
September 25, 2026
•[ ransomware, manufacturing ]
www.windor.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-09-25. Website: www.windor.com. Documents: Windor Supply & Manufacturing, Inc. PROLOGUE Sales representative Mark Brewster, on D...
Gerrity Stone
October 2, 2026
•[ ransomware, manufacturing, retail ]
Gerrity Stone was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-02. Sector: Manufacturing. Country: United States of America. Website: gerritystone.com. gerritystone.com zoominfo.com/c/gerrity-stone-inc/48615647 GerrityStone, Inc. is a family-owned stone fabrication and installation company founded in 1997 (part of the Gerrity family business dynasty dating back to 1906), based in Wilmington, Massachusetts, with a state-of-the-art 44,400 sq ft fabrication facility opened in 2022. It is a private, self-funded company with estimated annual revenue of ~$4.4M (range $110M) and 4353 employees. GerrityStone operates the largest natural stone inventory in New England 2,000+ slabs across 300+ colors, imported mainly from Italy and Brazil. The company offers full-cycle service (digital templating, CNC/water-jet fabrication, installation) and was the first new authorized Cambria quartz fabricator in 10 years. It has won "Best of Boston Home" multiple times (2009, 2010, 2024)
States Industries
October 2, 2026
•[ ransomware, manufacturing, leak ]
States Industries was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-10-02. Sector: Manufacturing. Country: United States of America. Website: statesind.com. States Industries is a privately held American manufacturer specializing in premium hardwood plywood, custom wood veneer panels, prefinished panels, and specialty components. Founded in Eugene, Oregon, in 1966, the company serves woodworkers, architects, designers, cabinetmakers, furniture manufacturers, and commercial fabricators across North America. Its products include custom hardwood panels, ApplePly, NOVA prefinished panels, wall paneling, and precision-manufactured components. States Industries emphasizes innovation, quality, and environmentally responsible manufacturing, offering customizable veneer species, cores, finishes, sizes, and performance specifications. The company operates its primary manufacturing facility in Eugene and also operates DrawerBox Specialties in Orange, California. States Industries currently employs more than 300 people.
The company headquarters is located in 29545 Enid Road East, Eugene, OR 97402, United States. 201-500 Employees
Precon Marine Inc
October 3, 2026
•[ ransomware, manufacturing ]
Precon Marine Inc was listed as a victim on the leak site of the netrunner ransomware group; the attack is estimated to have taken place on 2026-10-03. Sector: Transportation. Website: preconmarine.com. Precon Marine, Inc. is a diversified marine contractor specializing in heavy marine construction and advanced subsea services.
Mutsumi Group
October 4, 2026
•[ ransomware, manufacturing ]
Mutsumi Group was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-04. Sector: Manufacturing. Country: Japan. Website: www.mutsumi-g.co.jp.
Emser
October 4, 2026
•[ ransomware, manufacturing ]
Emser was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-04. Sector: Manufacturing. Country: Spain. Website: www.emser.es.
Chadwick Switchboards
October 4, 2026
•[ ransomware, manufacturing ]
Chadwick Switchboards was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-04. Sector: Manufacturing. Country: Australia. Website: www.chadwickswitchboards.com.au.
OMUR HIRDAVAT LTD
October 4, 2026
•[ ransomware, manufacturing, leak ]
OMUR HIRDAVAT LTD was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-10-04. Sector: Manufacturing. Country: Turkey. A Turkish company engaged in the wholesale and
retail trade of construction and household fittings
The archives contain several thousand documents with
personnel and customer data [Sector: Manufacturing]
TRANS LOGROÑO SOCIEDAD ANONIMA
October 5, 2026
•[ ransomware, manufacturing ]
TRANS LOGROO SOCIEDAD ANONIMA was listed as a victim on the leak site of the lamashtu ransomware group; the attack is estimated to have taken place on 2026-10-05. Sector: Transportation. Country: Spain. Website: translo.es. TRANS-LOGROO, S.A. is a Spanish road freight
and logistics company based in Logroo (La Rioja). It provides road haulage
(CNAE 4941), freight forwarding, and warehouse services including storage,
order picking, and tank cleaning.
Royal Selangor
October 4, 2026
•[ ransomware, manufacturing, leak ]
Royal Selangor was listed as a victim on the leak site of the BYOD ransomware group; the attack is estimated to have taken place on 2026-10-04. Sector: Manufacturing. Country: Malaysia. Website: royalselangor.com. Both, your Registered Users & Customer list have been affected. 300K Lines Total, Includes: Names, Emails, Phone Numbers, Addresses, Purchase Amount, Payment Method, Pretty Juicy stuff you don't want getting out there. Anyways, you know where to find us (contact tab). We will take you down when communication has been established between our team and yours.
ikhasas.com
October 5, 2026
•[ ransomware, manufacturing ]
ikhasas.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-10-05. Country: Malaysia. Website: ikhasas.com. The group was incorporated as iKHASAS Sdn. Bhd. in 2008 and subsequently expanded beyond construction into property development, hospitality, plantation,
KOOKABARRA JUICE
October 6, 2026
•[ ransomware, retail, manufacturing ]
KOOKABARRA JUICE was listed as a victim on the leak site of the Vexy Ransomware ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Retail & E-Commerce. Country: Australia. Website: kookabarra.com. French manufacturer specializing in fresh-pressed fruit juices, detox juices, smoothies, nectars and other fresh fruit products, serving both professionals and consumers.