Centrotherm International
January 25, 2026
•[ ransomware, manufacturing, leak ]
Centrotherm International was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-25. Sector: Manufacturing. Country: Germany. Website: www.centrotherm.de.
KREISEL
January 26, 2026
•[ ransomware, technology ]
KREISEL was listed as a victim on the leak site of the nova ransomware group; the attack is estimated to have taken place on 2026-01-26. Sector: Technology. Country: Austria. Website: kreisel.eu. KREISEL Industries GmbH specializes in bulk handling systems, offering tailored conveyor solutions including storage silos, pneumatic transport, and dust collection systems. The company designs, manufactures, and delivers equipment components based on specific performance parameters and technical requirements
Jakarta Nanyang School
January 26, 2026
•[ ransomware, education ]
Jakarta Nanyang School was listed as a victim on the leak site of the tengu ransomware group; the attack is estimated to have taken place on 2026-01-26. Sector: Education. Country: Indonesia. Website: jny.sch.id. Jakarta Nanyang School (JNY) is a co-educational institution catering to students aged 3 to 18, offering a global and progressive educational approach. Established in 2012 in Bumi Serpong Damai, JNY focuses on the holistic development of students, enhancing their academic, moral, physical, social, and emotional growth. The school provides a nurturing environment and a variety of programs including Kindergarten, Primary, Secondary, and Junior College. JNY aims to serve families seeking a comprehensive and innovative educational experience for their children
namico.go.ke
January 26, 2026
•[ ransomware, government ]
namico.go.ke was listed as a victim on the leak site of the tengu ransomware group; the attack is estimated to have taken place on 2026-01-26. Sector: Government & Defense. Country: Kenya. Website: namico.go.ke. The National Mining Corporation (NAMICO) is a Kenyan state corporation that serves as the government's investment arm in the mining and minerals sector. Established under the Kenya Mining Act 2016, its primary objective is the exploration, development, management, and investment of the country's mineral resources on behalf of the state.
premmotors.com
January 26, 2026
•[ ransomware, retail, automotive ]
premmotors.com was listed as a victim on the leak site of the tengu ransomware group; the attack is estimated to have taken place on 2026-01-26. Sector: Retail & E-Commerce. Country: India. Website: premmotors.com. Prem Motors is a leading automobile dealership for Maruti Suzuki, established in 1990 and headquartered in Gwalior, India. The company operates 58 showrooms, 43 workshops, and various outlets across multiple states, providing a comprehensive range of services including sales, service, accessories, finance, and insurance. With a strong focus on customer satisfaction and a commitment to quality, Prem Motors has earned numerous awards for its performance and service excellence. The company aims to deliver a unique buying experience and maintain a professional reputation among manufacturers, financiers, and customers alike.
Disuelas JC SAS
January 26, 2026
•[ ransomware, manufacturing ]
Disuelas JC SAS was listed as a victim on the leak site of the tengu ransomware group; the attack is estimated to have taken place on 2026-01-26. Sector: Manufacturing. Country: Colombia. La empresa Disuelas Jc Sas tiene como domicilio principal de su actividad la direccin, CALLE 26 SUR 29 49 en la ciudad de BOGOTA, BOGOTA. El telfono de Disuelas Jc Sas es el 6016296011. Esta empresa fu constituida como SOCIEDAD POR ACCIONES SIMPLIFICADA y se dedica a Fabricacion de partes del calzado
Prince & Schmidt LLP
January 26, 2026
•[ ransomware, leak, finance ]
Prince & Schmidt LLP was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-01-26. Sector: Professional Services. Country: United States of America. Website: LawForPersonalInjury.com. Data size claimed by the group: 1TB. Prince & Schmidt LLP
sitoy.com
January 26, 2026
•[ ransomware, retail, manufacturing ]
sitoy.com was listed as a victim on the leak site of the abyss ransomware group; the attack is estimated to have taken place on 2026-01-26. Sector: Retail & E-Commerce. Country: Hong Kong. Website: sitoy.com. Founded in 1968, Sitoy Group is engaged in the design, research, development, manufacturing, sale, wholesaling, and retailing of handbags, small leather goods, travel goods, and footwear products.
zHealthEHR — Practice Management Software for Chiropractic & Wellness Clinics
January 26, 2026
•[ ransomware, technology, healthcare ]
zHealthEHR Practice Management Software for Chiropractic & Wellness Clinics was listed as a victim on the leak site of the kazu ransomware group; the attack is estimated to have taken place on 2026-01-26. Sector: Technology. Country: United States of America. Website: www.zhealthehr.com. Ransom demand: $500 000. Data size claimed by the group: 15 GB. zHealthEHR is a cloud-based electronic health record (EHR) and practice management platform built primarily for chiropractors and other wellness providers. It combines clinical documentation, appointment scheduling, patient intake, billing, payments, and automated reminders into a single system, helping small to mid-size practices streamline daily operations. The platform focuses on ease of use, customizable SOAP notes, and patient engagement tools, allowing providers to reduce administrative workload and run their clinics more efficiently through a subscription-based software model.
www.shrimphouse.com
January 25, 2026
•[ ransomware, retail ]
www.shrimphouse.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-01-25. Sector: Hospitality. Country: United States of America. Website: www.shrimphouse.com. 1tb data
Joyva
January 18, 2026
•[ ransomware, manufacturing ]
Joyva was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Manufacturing. Country: United States of America. Website: www.joyva.com. United States
Routten & Laster Law
January 6, 2026
•[ ransomware, hack ]
Routten & Laster Law was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-01-06. Sector: Professional Services. Country: United States of America. Website: www.routtenlasterlaw.com. United States
Christine London
January 20, 2026
•[ ransomware, retail ]
Christine London was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-01-20. Sector: Retail & E-Commerce. Country: United States of America. Website: www.christinelondonltd.com. United States
Quantum Fuel Systems Technologies
January 22, 2026
•[ ransomware, energy, technology ]
Quantum Fuel Systems Technologies was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-01-22. Sector: Energy & Utilities. Country: United States of America. Website: www.qtww.com. United States
ALLMAX
June 27, 2025
•[ ransomware, retail ]
ALLMAX was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2025-06-27. Sector: Retail & E-Commerce. Country: Canada. Website: www.allmaxnutrition.com. Canada
F&B Mfg
January 23, 2026
•[ ransomware, manufacturing ]
F&B Mfg was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-01-23. Sector: Manufacturing. Country: United States of America. Website: www.fbmfg.com. United States
Tele Plus
January 26, 2026
•[ ransomware, technology ]
Tele Plus was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-01-26. Sector: Technology. Country: United States of America. Website: www.telepluscorp.com. United States
cs.at
January 25, 2026
•[ ransomware, finance ]
cs.at was listed as a victim on the leak site of the devman ransomware group; the attack is estimated to have taken place on 2026-01-25. Sector: Financial Services. Country: Austria. Website: cs.at. Insurance data, Hr data, client data
Uniflex Technology Inc
January 26, 2026
•[ ransomware, technology, manufacturing ]
Uniflex Technology Inc was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-01-26. Sector: Technology. Country: Taiwan. Website: uniflex.com.tw. UNIFLEX TECHNOLOGY INC
https://www.uniflex.com.tw/
Total data in the leak: 430GB
Leaked data:
- Clients: Asus, BMW, Mercedes-Benz, ELAN MICROELECTRONICS CORP., Dell, Volkswagen, Wacom, Netronix Inc, Solomon Systech, Innolux and other large clients all over the world!
- Data Classification: confidential
- Projects: Flexible printed circuit (FPC) boards, surface mount technology (SMT) services, design, manufacturing, assembly of FPC boards.
- Data: Agreements, projects, drawings, contracts, technical documentation, reports, research, quality control, technological processes and equipment.
And a lot of other VERY IMPORTANT information!
Full publication within two weeks!
freidarothman.com
January 26, 2026
•[ ransomware, retail, hack ]
freidarothman.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-01-26. Sector: Retail & E-Commerce. Country: United States of America. Website: freidarothman.com. Based jewelry and accessories brand founded and led by designer Freida Rothman, who grew up in Brooklyn and comes from
