Iberia
November 25, 2025
•[ ransomware, leak ]
Iberia was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2025-11-25. Sector: Transportation. Country: Spain. [AI generated] Iberia, officially known as Iberia Lneas Areas de Espaa and owned by International Airlines Group, is the flag carrier airline of Spain. The company was founded in 1927 and its headquarters are located in Madrid, Spain. It operates an international network of services from its main base of Madrid-Barajas Airport. Iberia is a member of the Oneworld airline alliance.
Accord Carton
October 19, 2025
•[ ransomware, manufacturing ]
Accord Carton was listed as a victim on the leak site of the payoutsking ransomware group; the attack is estimated to have taken place on 2025-10-19. Sector: Manufacturing. Country: United States of America. Website: accordcarton.com. Data size claimed by the group: 1.5TB. [AI generated] Accord Carton is a family-owned company that specializes in designing and manufacturing high-quality folding cartons. Founded in 1940, the company is based in Alsip, Illinois. Accord Carton utilizes advanced printing and finishing technologies to produce innovative packaging design solutions. Their services are widely used across industries, including food and beverage, healthcare, and beauty products.
Rochester Philharmonic Orchestra
November 25, 2025
•[ ransomware, leak ]
Rochester Philharmonic Orchestra was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-11-25. Sector: Hospitality. Country: United States of America. Website: rpo.org. The Rochester Philharmonic Orchestra (RPO) is a distinguished ins
titution with a 100-year legacy of artistic excellence, offering
a diverse range of concerts and educational programs.
We will upload corporate documents soon. Musicians' personal info
rmation (SSNs, DLs, phones and so on), budget, internal confident
ial docs, NDA, etc.
Columbia Medical Practice
November 25, 2025
•[ ransomware, healthcare ]
Columbia Medical Practice was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-25. Sector: Healthcare. Country: United States of America. Website: www.cmpractice.com.
Christofle
November 25, 2025
•[ ransomware, retail ]
Christofle was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-25. Sector: Retail & E-Commerce. Country: France. Website: www.christofle.com.
New England Tractor Trailer Training School
November 25, 2025
•[ ransomware, education ]
New England Tractor Trailer Training School was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-25. Sector: Education. Country: United States of America. Website: nettts.com.
Inspire Communities
November 25, 2025
•[ ransomware, healthcare ]
Inspire Communities was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-25. Sector: Healthcare. Country: United States of America. Website: inspirecommunities.com.
Paal
November 25, 2025
•[ ransomware, technology ]
Paal was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-25. Sector: Technology. Country: Germany. Website: www.paal.de.
Lake Superior State University
November 25, 2025
•[ ransomware, education ]
Lake Superior State University was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-25. Sector: Education. Country: United States of America. Website: www.lssu.edu.
National Money Mart Company
November 25, 2025
•[ ransomware, finance ]
National Money Mart Company was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2025-11-25. Sector: Financial Services. Country: Canada. Website: moneymart.ca. [AI generated] National Money Mart Company, commonly known as Money Mart, is a Canadian financial services company which provides payday loans, cheque cashing, tax preparation and money transfer services for underbanked or not-fully-served customers. Headquartered in Victoria, British Columbia, Money Mart operates in multiple locations across Canada. It has facilitated financial solutions for millions of customers since its inception in 1982.
Kids & Company
November 14, 2025
•[ ransomware, retail, education ]
Kids & Company was listed as a victim on the leak site of the sinobi ransomware group; the attack is estimated to have taken place on 2025-11-14. Sector: Retail & E-Commerce. Country: Canada. Website: www.kidsandcompany.com. Kids & Company is a leading provider of high-quality, flexible child care and early education, operating over 150 locations across North America. They offer a range of programs for children aged 6 weeks to 12 years, including infant, toddler, preschool, kindergarten, and school-age care, as well as summer camps and back-up care services. Their unique curriculum emphasizes emergent learning and fosters independence, confidence, and socialization through play and exploration. The company also partners with employers to provide caregiving benefits, addressing work-life conflicts for families.
AllerVie Health
November 26, 2025
•[ ransomware, healthcare ]
AllerVie Health was listed as a victim on the leak site of the anubis ransomware group; the attack is estimated to have taken place on 2025-11-26. Sector: Healthcare. Country: United States of America. Website: allervie.com. Major customer database leak.
Workflow Concepts
November 26, 2025
•[ ransomware, technology ]
Workflow Concepts was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-26. Sector: Professional Services. Country: Australia. Website: workflowconcepts.com.
Eastek International
November 26, 2025
•[ ransomware, manufacturing ]
Eastek International was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-26. Sector: Manufacturing. Country: United States of America. Website: www.eastekinternational.com.
Emond Publishing
November 21, 2025
•[ ransomware, education ]
Emond Publishing was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2025-11-21. Sector: Education. Country: Canada. Website: emond.ca. Emond Publishing is a Canadian publisher specializing in legal education materials and resources for law students and professionals. Their product offerings include textbooks, exam preparation materials, and publications focused on various legal subjects such as criminal law and immigration law. They cater primarily to college and university students, law school attendees, and legal practitioners preparing for certification exams. Emond Publishing is committed to providing high-quality resources by Canadians, for Canadians.
Disston
November 26, 2025
•[ ransomware, manufacturing ]
Disston was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-26. Sector: Manufacturing. Country: United States of America. Website: disstontools.com.
BioPharma Services
November 19, 2025
•[ ransomware, healthcare ]
BioPharma Services was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-19. Sector: Healthcare. Country: Canada. Website: www.biopharmaservices.com.
Carlton Fields
October 31, 2025
•[ ransomware, finance, hack ]
Carlton Fields was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2025-10-31. Sector: Professional Services. Country: United States of America. Website: carltonfields.com. Carlton Fields is a nationally recognized law firm delivering strategic legal counsel to corporations,
Globatech
November 7, 2025
•[ ransomware, leak, technology ]
Globatech was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-11-07. Sector: Professional Services. Country: Canada. Website: globatech.ca. Globatech comprises six companies, offering 24/7 service througho
ut Quebec with an expanded presence across Canada to ensure the h
ealth and safety of your buildings.
We will upload about 25gb of corporate documents soon. Employee a
nd clients information, financial and accounting data, projects,
contacts and agreements, confidential files, NDAs, etc.
FloorHeat
November 26, 2025
•[ ransomware, manufacturing, financial ]
FloorHeat was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-11-26. Sector: Manufacturing. Country: United States of America. Website: floorheat.com. FloorHeat Company specializes in manufacturing and distributing r
adiant heat components and complete underfloor heating systems, i
ncluding electric film, cable heating mats, and their patented Ea
syFloor hydronic heating system.
We will upload 25gb of corporate documents soon. Detailed employe
e personal information, financial and accounting data, contacts a
nd agreements, NDAs, etc.
