Avraham Hayyim ( Mehrdad Rahimi ) – Mossad Agent
January 18, 2026
•[ ransomware, espionage, government ]
Avraham Hayyim ( Mehrdad Rahimi ) Mossad Agent was listed as a victim on the leak site of the handala ransomware group; the attack is estimated to have taken place on 2026-01-18. Avraham Hayyim ( Mehrdad Rahimi ) | (Guiding Officer of Iranian Agents in Mossads Iran Desk) Mehrdad Rahimi, serving as the guiding officer for Iranian agents within Mossads Iran Desk, attempted to play a major role in organizing and directing networks behind the unrest inside Iran. By managing and directing Iranian operatives, he sought to
MKC Customs Brokers International Inc.
January 18, 2026
•[ ransomware, leak ]
MKC Customs Brokers International Inc. was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Transportation. Country: United States of America. Website: mkcchb.com. International trading has never been as complicated and demanding as it is today. Every shipment, large or small, requires a customs broker who is an absolutely dependable working partner. That's MKC Customs Brokers!
Southern Alberta Community Living Association
January 18, 2026
•[ ransomware, government, healthcare ]
Southern Alberta Community Living Association was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Government & Defense. Country: Canada. Website: sacla.ca. SACLA provides individualized services and supports aimed at assisting individuals with disabilities to achieve their personal goals. Established in 1980, the association focuses on building vibrant communities where every person is connected, contributing, and valued. Their services are tailored to the unique needs of each individual, beginning with a comprehensive consultation to determine the best approach for fostering quality of life and aspirations. SACLA also engages in projects like MyCompass and CATALYST to promote empowerment and address issues such as unemployment for marginalized groups.
Balneario
January 18, 2026
•[ ransomware, retail ]
Balneario was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Hospitality. Country: Spain. Website: www.balneario.com.
Vietnam Airlines
January 18, 2026
•[ ransomware, leak ]
Vietnam Airlines was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Transportation. Country: Vietnam. Website: www.vietnamairlines.com.
University Volkswagen Mazda
January 18, 2026
•[ ransomware, retail, automotive ]
University Volkswagen Mazda was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Retail & E-Commerce. Country: United States of America. Website: www.universityvwmazda.com.
Jampen Holzbau AG
January 18, 2026
•[ ransomware, manufacturing ]
Jampen Holzbau AG was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Manufacturing. Country: Switzerland. Website: www.jampen-holzbau.ch.
GSM PORTAL TEKNOLOJİ HİZMETLERİ TİC. LTD. ŞTİ
January 18, 2026
•[ ransomware, technology ]
GSM PORTAL TEKNOLOJ HZMETLER TC. LTD. T was listed as a victim on the leak site of the tengu ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Technology. Country: Turkey. Website: gsmportal.com.tr. This is a small to medium-sized Turkish company officially registered in Istanbul, operating in the GSM telecommunications technology and technical services sector. It has complete official documentation but is not very active digitally
Title Guaranty
January 18, 2026
•[ ransomware, finance ]
Title Guaranty was listed as a victim on the leak site of the sinobi ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Financial Services. Country: United States of America. Website: www.titleguaranty.com. Title Guaranty Company of Lewis County is a locally owned title escrow provider located in Chehalis, Washington, servicing clients across the entire state. They offer comprehensive title and real estate settlement services tailored for realtors, consumers, lenders, builders, and commercial clients. The company emphasizes integrity and local knowledge, ensuring personal attention and outstanding service for each transaction. Their mission is to simplify the closing process, making significant transactions easier for their clients.
Office for Students
January 18, 2026
•[ ransomware, education ]
Office for Students was listed as a victim on the leak site of the sinobi ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Education. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.officeforstudents.org.uk. he Office for Students (OfS) aims to ensure that all students have a rewarding experience in higher education that enhances their personal and professional lives. It provides resources and guidance on quality assessment, financial sustainability, and student welfare while promoting equal opportunities and student choice. The OfS collaborates with educational institutions to improve standards and support systems in the sector. Their focus includes the well-being of students, financial support, and the overall academic landscape in England.
Advanced Business Equipment
January 18, 2026
•[ ransomware, technology ]
Advanced Business Equipment was listed as a victim on the leak site of the sinobi ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Technology. Country: United States of America. Website: www.advancedbusinessequipment.com. Advanced UK is one of four trusted Xerox Platinum Partners and established for over a quarter of a century (since 1991). We pride ourselves with focusing on reliable customer service, entwined with the ability to identify and deliver the best managed-print service, production printing and digital transformation solutions for our clients every need. We also work in collaboration with leading technology and software providers to further enhance our value proposition and operate with a vendor-neutral approach. Advanced UK serves a large customer base which varies from small organisations through to large international corporates. We are accredited to sell the entire range of Xerox products and services, and we are an experienced provider of managed-print and document services. In line with industry trends, Advanced UK are experts at bespoke software solutions for all print and document management processes.
QFloors
January 18, 2026
•[ ransomware, technology ]
QFloors was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Technology. Country: United States of America. Website: qfloors.com. A flooring software provider.
Mid-park Ink
January 18, 2026
•[ ransomware, retail ]
Mid-park Ink was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Retail & E-Commerce. Country: United States of America. Website: mid-park.com. A construction holding from Kentucky.
Thunder Mountain Harley-Davidson
January 18, 2026
•[ ransomware, retail ]
Thunder Mountain Harley-Davidson was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Retail & E-Commerce. Country: United States of America. Website: thundermountainharley.com. A Harley-Davidson dealership
Ocean Fish
January 14, 2026
•[ ransomware, retail ]
Ocean Fish was listed as a victim on the leak site of the lynx ransomware group; the attack is estimated to have taken place on 2026-01-14. Sector: Agriculture and Food Production. Country: Romania. Website: www.oceanfish.com. OceanFish is a leading company in Romania since 1998, specializing in the import, processing, and distribution of fish products. Their offerings include fresh, frozen, prepared seafood, sushi, and canned products, catering primarily to the HORECA sector. The company is committed to high standards and certifications, participating in social projects and promoting their products through various campaigns. OceanFish also runs a 'Seafood School' to educate clients about seafood preparation and benefits.
Channel Products
January 18, 2026
•[ ransomware, manufacturing, technology ]
Channel Products was listed as a victim on the leak site of the sinobi ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Manufacturing. Country: United States of America. Website: www.channelproducts.com. Channel Products specializes in inventing and manufacturing component systems and technologies aimed at enhancing safety, reliability, and efficiency for manufacturers. With over 40 years of experience, the company offers advanced ignition technology, custom engineering solutions, and expert support to a diverse range of manufacturing clients. The organization places a strong emphasis on integrity, reliability, and customer service, making it a trusted partner for those seeking a competitive edge in the market. Channel Products is recognized for its commitment to quality and innovation in the engineering and manufacturing sectors.
Deck India Engineering Pvt. Ltd
January 19, 2026
•[ ransomware, manufacturing, technology ]
Deck India Engineering Pvt. Ltd was listed as a victim on the leak site of the tengu ransomware group; the attack is estimated to have taken place on 2026-01-19. Sector: Manufacturing. Country: India. Website: deckindia.com. Deck India Engineering Pvt. Ltd. specializes in various heat treatment services including Liquid Nitriding, Nitro Carburising, and Gas Nitriding, serving a diverse client base across Maharashtra and beyond. Established in Pune in 1998, the company is recognized as the first SSI unit in the area dedicated to these processes, with a strong focus on quality and customer satisfaction. The management team consists of professional engineers and metallurgists with extensive industry experience. Additionally, they manufacture and supply heat treatment equipment and furnaces to meet high standards in various industries.
depotnapoli.com
January 6, 2026
•[ ransomware, retail ]
depotnapoli.com was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-01-06. Sector: Retail & E-Commerce. Country: Italy. Website: depotnapoli.com. DEPOT NAPOLI Il primo Fetish Cruising Bar a Napoli Club dedicato al divertimento e alla diversit co...
Whitfield Welding Inc
January 19, 2026
•[ ransomware, manufacturing ]
Whitfield Welding Inc was listed as a victim on the leak site of the nitrogen ransomware group; the attack is estimated to have taken place on 2026-01-19. Sector: Manufacturing. Country: Canada. Website: www.whitfieldwelding.com. Specializing in instrumental welding (TIG, Micro TIG, MIG), microlaser welding, laser cladding, laser hardening, laser engraving, stress relieving, and mechanical processing.
Durashiloh
January 19, 2026
•[ ransomware, manufacturing, automotive ]
Durashiloh was listed as a victim on the leak site of the nitrogen ransomware group; the attack is estimated to have taken place on 2026-01-19. Sector: Manufacturing. Country: United States of America. Website: durashiloh.com. The company specializes in the development, engineering, and manufacturing of various components and systems for the automotive industry and other sectors.