[EVIDENCE PACK 2]ASKUL
October 19, 2025
•[ ransomware, retail, technology ]
[EVIDENCE PACK 2]ASKUL was listed as a victim on the leak site of the ransomhouse ransomware group; the attack is estimated to have taken place on 2025-10-19. Sector: Retail & E-Commerce. Country: Japan. Website: www.askul.co.jp. ASKUL Corporation, founded in 1963 and headquartered in Tokyo, is a leading Japanese e-commerce company serving both businesses (B2B) and consumers (B2C). It offers office supplies, daily goods, medical products, and logistics services through platforms such as ASKUL, SOLOEL ARENA, and LOHACO. The company operates its own distribution centers, ensuring fast delivery and efficient supply chain management. ASKUL also provides additional services like printing, office design, and digital business solutions. The company emphasizes sustainability, digital transformation, and recycling initiatives.
Weintraub Traub Tracy & Virk Cra's LLP
November 10, 2025
•[ ransomware, leak, finance ]
Weintraub Traub Tracy & Virk Cra's LLP was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2025-11-10. Sector: Professional Services. Country: United States of America. Website: tax1040.com. We have data from Piaty Mller-Mezin Schoeller Rechtsanwlte GmbH, payment and tax records, employee and client documents, as well as projects and developments, and personal correspondence with clients.
MARCK Industries
October 23, 2025
•[ ransomware, manufacturing ]
MARCK Industries was listed as a victim on the leak site of the ransomhouse ransomware group; the attack is estimated to have taken place on 2025-10-23. Sector: Manufacturing. Country: United States of America. Website: www.marck.net. GMARCK Industries believe that the services we provide make a difference: In Your Company - From your first 360 Waste Audit to implementing and maintaining your customized recycling program, we help you reach your sustainability goals while helping you increase efficiencies and reduce costs. In Our Community - Recycling keeps reusable products out of the landfill, while boosting the local economy with sustainable jobs.
Ami Bearings
October 11, 2025
•[ ransomware, manufacturing, leak ]
Ami Bearings was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-10-11. Sector: Manufacturing. Country: United States of America. Website: amibearings.com. AMI Bearings, Inc. is a premier manufacturer of mounted ball bear
ings that caters to the North American market.
We will upload 15gb of corporate documents soon. Employee informa
tion, clients information, lots of projects information, agreemen
ts and contracts, NDAs, etc.
Mciver Engineering & Controls
November 10, 2025
•[ ransomware, manufacturing ]
Mciver Engineering & Controls was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-10. Sector: Manufacturing. Country: United States of America. Website: www.mcivereng.com.
OMS
November 10, 2025
•[ ransomware, manufacturing ]
OMS was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-10. Sector: Manufacturing. Country: Slovakia. Website: www.omslighting.com.
Land Title Guaranty
October 29, 2025
•[ ransomware, finance ]
Land Title Guaranty was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2025-10-29. Sector: Financial Services. Country: United States of America. Website: www.landtitleweb.com. United States
Kwik Mix Materials
October 31, 2025
•[ ransomware, manufacturing ]
Kwik Mix Materials was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2025-10-31. Sector: Manufacturing. Country: Canada. Website: www.kwikmix.com. Canada
Jean-Georges
March 6, 2024
•[ ransomware, leak ]
Jean-Georges was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2024-03-06. Sector: Hospitality. Country: United States of America. Website: www.jean-georges.com. United States
Garvin Promotion Group
November 6, 2025
•[ ransomware, leak ]
Garvin Promotion Group was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2025-11-06. Sector: Professional Services. Country: United States of America. Website: www.garvinpromo.com. United States
Yaesu
November 10, 2025
•[ ransomware, technology ]
Yaesu was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-10. Sector: Technology. Country: Japan. Website: www.yaesu.com.
Heart South Cardiovascular Group
November 10, 2025
•[ ransomware, healthcare, hack ]
Heart South Cardiovascular Group was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2025-11-10. Sector: Healthcare. Country: United States of America. Website: heartsouthpc.com. Heart South Cardiovascular Group Heart South is a leading provider of comprehensive cardiac and vascular care in Central Alabama. More
Easterseals Arc of Northeast Indiana
September 5, 2025
•[ ransomware, healthcare, government ]
Easterseals Arc of Northeast Indiana was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2025-09-05. Sector: Government & Defense. Country: United States of America. Website: eastersealsnei.org. Easterseals Northeast Indiana provides life-changing services and programs for individuals with disabilities, their families, and the wider community. Their offerings include youth and adult services, employment readiness programs, wellness coordination, and recreational activities designed to empower participants. The organization operates across multiple locations in northeast Indiana, including Fort Wayne, Columbia City, and Angola, and is committed to meeting the unique needs of each individual. Through compassionate staff and various service initiatives, they aim to create inclusive environments and enhance the quality of life for their clients.
Sarulla Operation
November 11, 2025
•[ ransomware, energy, financial ]
Sarulla Operation was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2025-11-11. Sector: Energy & Utilities. Country: Indonesia. Website: sarullaoperations.com. Administration
Financial operations
Budgets and account balances
User information
Confidential information
Over 1,000 passports
Payment instructions and other accounting documents
Contract discussions and final contracts
and others
Vascara, Vietnam
November 11, 2025
•[ ransomware, retail ]
Vascara, Vietnam was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2025-11-11. Sector: Retail & E-Commerce. Country: Vietnam. Website: vascara.com. Data size claimed by the group: 30 GB. Vascara, Vietnam
Paul Hildebrandt
November 11, 2025
•[ ransomware, manufacturing ]
Paul Hildebrandt was listed as a victim on the leak site of the sarcoma ransomware group; the attack is estimated to have taken place on 2025-11-11. Sector: Manufacturing. Country: Germany. Website: hildebrandt.de. Paul Hildebrandt
Paul Hildebrandt AG is a leading packaging company offering over 50,000 products, including environmentally friendly options. With 300 employees across 14 locations in Germany, Austria, and Denmark, they provide tailored packaging solutions for a variety of industries. The company emphasizes sustainability and efficient packaging processes as part of their commitment to client solutions. Their diverse product range includes films, boxes, adhesive tapes, and various packaging materials.Geo: Germany - Leak size: 1,4 TB Archive - Contains: Files, SQL, Exchange
Defensoría del Pueblo de Colombia – Protection and Promotion of Human Rights
November 8, 2025
•[ ransomware, government ]
Defensora del Pueblo de Colombia Protection and Promotion of Human Rights was listed as a victim on the leak site of the kazu ransomware group; the attack is estimated to have taken place on 2025-11-08. Sector: Government & Defense. Country: Colombia. Website: www.defensoria.gov.co. Ransom demand: $100 000. Data size claimed by the group: 466.2 GB. The official online portal of the Defensora del Pueblo de Colombia, a constitutional and autonomous institution responsible for promoting, protecting, and defending human rights across the country. It serves as a public platform where citizens can access information about their rights, file complaints, seek legal guidance, and learn about the institutions oversight and advocacy efforts. The Defensora operates independently from other branches of government and plays a key role in ensuring that state entities respect and uphold fundamental rights, especially for vulnerable populations
National Civil Service Commission of Colombia
November 10, 2025
•[ ransomware, government ]
National Civil Service Commission of Colombia was listed as a victim on the leak site of the kazu ransomware group; the attack is estimated to have taken place on 2025-11-10. Sector: Government & Defense. Country: Colombia. Website: cnsc.gov.co. Ransom demand: $300 000. Data size claimed by the group: 2.9 TB. The official portal of the Comisin Nacional del Servicio Civil (CNSC), Colombias National Civil Service Commission. This government body is responsible for overseeing the recruitment, selection, and management of public servants in the country. It ensures that hiring for government positions is fair, transparent, and based on merit. The site provides essential information about job openings in the public sector, application processes, and the regulations that govern public service employment in Colombia. It serves as a key resource for individuals seeking to apply for civil service positions or learn about public sector employment in Colombia
Brian-Kyles Construction
November 11, 2025
•[ ransomware, manufacturing ]
Brian-Kyles Construction was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-11. Sector: Manufacturing. Country: United States of America. Website: www.briankyles.com.
Octomeca Oy
October 19, 2025
•[ ransomware, manufacturing, technology ]
Octomeca Oy was listed as a victim on the leak site of the ransomhouse ransomware group; the attack is estimated to have taken place on 2025-10-19. Sector: Manufacturing. Country: Finland. Website: www.octomeca.fi. Octomeca is Finnish technology company, founded in 1989. We are specialized in designing and manufacturing of premium class stretch film wrapping machines.
