1da9100e55aqf21eb651eNea
November 6, 2026
•[ ransomware, technology ]
1da9100e55aqf21eb651eNea was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-11-06. Country: Albania. 1da9100e55aqf21eb651eNea
Benesch Law
November 7, 2026
•[ ransomware, leak, finance ]
Benesch Law was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-11-07. Sector: Professional Services. Country: United States of America. [AI generated] Benesch Law, formally Benesch, Friedlander, Coplan & Aronoff LLP, is a United States-based law firm headquartered in Cleveland, Ohio. It operates in the legal services industry, providing counsel across practice areas including corporate law, litigation, intellectual property, labor and employment, real estate, transportation and logistics, and healthcare. The firm serves businesses, financial institutions, and individual clients nationwide.
Kahler Automation
November 7, 2026
•[ ransomware, manufacturing, leak ]
Kahler Automation was listed as a victim on the leak site of the anubis ransomware group; the attack is estimated to have taken place on 2026-11-07. Sector: Manufacturing. Country: Germany. Fertilizer, grain and exposed data.
maersk
November 7, 2026
•[ ransomware, manufacturing, technology ]
maersk was listed as a victim on the leak site of the Whitearmor ransomware group; the attack is estimated to have taken place on 2026-11-07. Sector: Transportation. Country: Denmark. Maersk is one of the world's two largest container lines: founded in
1904, headquartered in Copenhagen, roughly 100,000 employees in about
130 countries, and USD 55.5 billion in revenue in 2024, with around
USD 12 billion of EBITDA. Your contract-logistics arm, the former LF
Logistics, runs fulfilment for many of the world's largest consumer
brands. Five million dollars is roughly four hours of that EBITDA.
We hold approximately 100 GB of data from your OCF / LF Logistics
platform:
- 29,297 driver records, 16,093 of them with plaintext passwords
- 16,123 staff accounts, including 33 SUPER_ADMIN accounts
- 18,913 delivery recipients with names and street addresses
- 64,665 signed delivery receipts (214,107 documents in total)
- 14.44 million inventory rows, 189,248 purchase orders, 334,432 ASNs
- 27,842 mobile device logs containing phone numbers, emails and IMEIs
You have 30 days to contact us and pay USD 5,000,000 in bitcoin
Emails with instructions will be sent to you shortly, if you have failed to receive them,
Contact:
Session: 0547b7f96d469ecb332e89d0108e71c92df5bacff6c4ed5b9801ab5fffe872ee67
Email: whitearmorrxd@proton.me
Gestimed
October 25, 2026
•[ ransomware, healthcare ]
Gestimed was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-10-25. Sector: Healthcare. Country: Spain.
Meller Group
October 17, 2026
•[ ransomware, financial ]
Meller Group was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-10-17. Sector: Other. Country: United Kingdom of Great Britain and Northern Ireland. - Financial Records- Employee Accounting Records
IMD Group
October 14, 2026
•[ ransomware, financial ]
IMD Group was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Professional Services. Country: Italy. - Financial Records- Employee Data
Treuhand & Immobilien Abt AG
November 7, 2026
•[ ransomware, finance ]
Treuhand & Immobilien Abt AG was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-11-07. Sector: Financial Services. Country: Switzerland. Treuhand & Immobilien Abt AG Treuhand & Immobilien Abt AG is your partner and advisor for private individuals as well as small and medium-sized enterprises (SMEs). More
Higginbotham
November 7, 2026
•[ ransomware, leak, finance ]
Higginbotham was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-11-07. Sector: Professional Services. Country: United States of America. insurance brokerage United States | The complete correspondence attachment store of a large independent insurance brokerage: over 217,000 client policy and working documents from 2013 through 2026, including workers compensation and property policies of named clients; Client policy and underwriting records: carrier underwriting questionnaires, producer reports with client codes, names and policy numbers, and producer email with commission, prospect and benefits data; Client reference rosters naming the institutions the brokerage insures, producer books of business with policy numbers and premiums, and the full customer relationship databases | [NOT PAID EXPOSED]
Infutor Data Solutions
November 7, 2026
•[ ransomware, technology, leak ]
Infutor Data Solutions was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-11-07. Sector: Technology. Country: United States of America. consumer identity data and analytics United States | Consumer identity records: names, street addresses, telephone numbers, birth years and consumer email addresses, millions of rows; A profiled production table of 590,404,149 rows of consumer survey response data; Consumer leads with full identity graph enrichment, including 13,660 unique consumer email addresses in a single file and 102,062 full identity records with 100,957 unique emails in another; The internal inventory showing which of the production tables hold consumer personal data, including tables that hold Social Security numbers; A warehouse table of over 1.7 billion consumer rows with names and dates of birth, counted file by file, plus a consumer address table of over 1.1 billion rows; Merchant brand spending affinity data; Client delivery credentials stored in plaintext; State level delivery work files with 203,505,791 counted rows carrying consumer names, birth years, cleartext emails and internet protocol addresses, and a property scoring table of 151,864,181 rows with names, phones, addresses and property values | [NOT PAID EXPOSED]
Lampenwelt GmbH
November 7, 2026
•[ ransomware, retail, leak ]
Lampenwelt GmbH was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-11-07. Sector: Retail & E-Commerce. Country: Germany. online lighting retail Germany | Roughly 81 million raw search queries typed by shoppers on the storefronts of a leading European online lighting retailer, including hundreds of real customer email addresses that shoppers typed into the search box; Per product unit cost and rolling revenue data for more than 200 thousand products across four country stores, from which gross margin per product is directly computable; The silver, gold and platinum net price tiers offered to business customers on the professional storefront | [NOT PAID EXPOSED]
Pekin Insurance
November 7, 2026
•[ ransomware, finance ]
Pekin Insurance was listed as a victim on the leak site of the metaencryptor ransomware group; the attack is estimated to have taken place on 2026-11-07. Sector: Financial Services. Country: United States of America. Website: pekininsurance.com. Pekin Insurance operates as a group of combined entitiesprimarily The Farmers Automobile Insurance Association, Pekin Insurance Company, Pekin Select Insurance Company, and Pekin Life Insurance Company (OTC: PKIN)
Data size:
Revenue: USD 270M
Hyundai E&C
November 7, 2026
•[ ransomware, manufacturing, automotive ]
Hyundai E&C was listed as a victim on the leak site of the metaencryptor ransomware group; the attack is estimated to have taken place on 2026-11-07. Sector: Manufacturing. Country: South Korea. Website: en.hdec.kr/en. Hyundai Motor Group is a global corporation that has created a value chain based on automobiles, steel, and construction and includes logistics, finance, IT and service. With about 250,000 employees worldwide, the Groups automobile brands include Hyundai Motor Co. and Kia Corporation. Armed with creative thinking, cooperative communication and the will to take on all challenges, we are working to create a better future for all.
Data size:
Proterial America, Ltd.
November 7, 2026
•[ ransomware, manufacturing, technology ]
Proterial America, Ltd. was listed as a victim on the leak site of the metaencryptor ransomware group; the attack is estimated to have taken place on 2026-11-07. Sector: Manufacturing. Country: United States of America. Website: us.proterial.com. Proterial, Ltd., headquartered in Tokyo, Japan, with consolidated revenue totaled about 881 billion yen ($8.3 billion) in fiscal 2019 (ended March 31, 2020), is one of the major member companies of the Proterial Group. Proterial America manufactures and markets a diverse portfolio of high-grade metal products and materials, magnetic materials and applications, high-grade functional components and equipment, wires, cables and related products.
Data size:
Wooshin Systems
November 7, 2026
•[ ransomware, technology, automotive ]
Wooshin Systems was listed as a victim on the leak site of the metaencryptor ransomware group; the attack is estimated to have taken place on 2026-11-07. Sector: Technology. Country: South Korea. Website: wooshinsys.co.kr/eng/main. Based on our technology and know-how accumulated since our founding in 1984, Wooshin System has become a leader for the future of automotive industry through continuous R&D, under the goal of making the life of the human more productive and valuable.
Data size:
DAEWON Chemical
November 7, 2026
•[ ransomware, manufacturing ]
DAEWON Chemical was listed as a victim on the leak site of the metaencryptor ransomware group; the attack is estimated to have taken place on 2026-11-07. Sector: Manufacturing. Country: South Korea. Website: daewon21.co.kr. DAEWON Chemical was established in 1974 and has grown to the leader of manufacturers of Polyurethane synthetic leather and wallpaper in Korea.
Data size:
Daeah E&C
November 7, 2026
•[ ransomware, manufacturing, energy ]
Daeah E&C was listed as a victim on the leak site of the metaencryptor ransomware group; the attack is estimated to have taken place on 2026-11-07. Sector: Manufacturing. Country: South Korea. Website: daeahenc.co.kr/en. We have been expanding our business into high-tech industries, nuclear power plants, power plants, industrial environmental facilities, civil engineering and building construction, establishing ourselves as a trusted partner in global markets including the Middle East, Southeast Asia, and Europe.
Data size: 100 GB
Revenue: USD 491M
Christie Digital Systems
November 7, 2026
•[ ransomware, technology, manufacturing ]
Christie Digital Systems was listed as a victim on the leak site of the metaencryptor ransomware group; the attack is estimated to have taken place on 2026-11-07. Sector: Technology. Country: United States of America. Website: www.christiedigital.com. Were a global visual technologies company with a vision: helping our customers create brilliant and unforgettable experiences. Customers around the world rely on our solutions to help them do just that in cinema, large mega-events, and themed entertainment. Our technology, paired with the support of professional services to design, deploy and maintain installations, includes advanced RGB pure laser projectors, SDVoE technology, image processing, and LED walls.
Data size:
Revenue: USD 595.6M
Otto Stops
November 7, 2026
•[ ransomware, technology ]
Otto Stops was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-11-07. Sector: Transportation. Otto Stops (stops.de) is a German IT systems integrator (Systemhaus) headquartered in Neuss. The company designs, deploys, and maintains corporate IT infrastructure, including servers, workstations, and telephone networks. It also provides managed services, offering cybersecurity, cloud solutions, and monitoring for small and medium-sized businesses.
Schroers Ingenieure
November 7, 2026
•[ ransomware, leak, manufacturing ]
Schroers Ingenieure was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-11-07. Sector: Professional Services. Country: Germany. Schroers Ingenieure is a German engineering firm specializing in the design of structural systems and building physics. The company develops technical documentation for residential, commercial, and industrial buildings. Its services also include energy efficiency assessments, fire protection, and structural reliability analysis.
