Visionwheel
November 25, 2025
•[ ransomware, manufacturing, automotive ]
Visionwheel was listed as a victim on the leak site of the payoutsking ransomware group; the attack is estimated to have taken place on 2025-11-25. Sector: Manufacturing. Country: United States of America. Website: visionwheel.com. Data size claimed by the group: 855GB. [AI generated] Visionwheel is a prominent manufacturing company that produces high-quality, aesthetically-designed alloy wheels for various vehicles such as cars, light trucks, and SUVs. The company offers a wide range of styles, finishes, and sizes, catering to diverse customer requirements. Visionwheel ensures a rigorous testing process to maintain robust safety standards. It also continually innovates in design to stay abreast in the competitive auto industry.
JJ White
November 20, 2025
•[ ransomware, manufacturing, healthcare ]
JJ White was listed as a victim on the leak site of the payoutsking ransomware group; the attack is estimated to have taken place on 2025-11-20. Sector: Manufacturing. Country: United States of America. Website: jjwhiteinc.com. Data size claimed by the group: 512GB. [AI generated] JJ White is a multi-divisional construction company based in Philadelphia, Pennsylvania. It specializes in general, mechanical and industrial construction with additional services in HVAC maintenance and service, fire protection, and rigging projects. The company operates across the United States working with industries such as healthcare, pharmaceutical, petrochemical, and manufacturing.
Peugeot Motocycles
November 20, 2025
•[ ransomware, manufacturing, leak ]
Peugeot Motocycles was listed as a victim on the leak site of the payoutsking ransomware group; the attack is estimated to have taken place on 2025-11-20. Sector: Manufacturing. Country: France. Website: peugeot-motocycles.com. Data size claimed by the group: 267GB. [AI generated] Peugeot Motocycles is a French company that manufactures a wide range of scooters and small motorcycles. It is one of the oldest motorcycle manufacturers in the world, having started production in 1898. Over the years, the company has become renowned for its innovative designs and high-performance bikes. It's currently owned by Indian multinational conglomerate Mahindra & Mahindra.
Vereinigte-stadtwerke
November 20, 2025
•[ ransomware, energy, technology ]
Vereinigte-stadtwerke was listed as a victim on the leak site of the payoutsking ransomware group; the attack is estimated to have taken place on 2025-11-20. Sector: Energy & Utilities. Country: Germany. Website: vereinigte-stadtwerke.de. Data size claimed by the group: 800GB. [AI generated] Vereinigte Stadtwerke is a German utility company that supplies electricity, natural gas, and water to its customers. Apart from these, the company also offers telecommunication services including Internet and fixed network. It primarily serves residents and businesses in the Northern Germany region. The company was founded in 2012 as a merger of several municipal utilities to increase efficiency and service quality.
Samson Equipment
January 14, 2026
•[ ransomware, manufacturing ]
Samson Equipment was listed as a victim on the leak site of the tengu ransomware group; the attack is estimated to have taken place on 2026-01-14. Sector: Manufacturing. Country: United States of America. Website: samsonequipment.com. Samson Equipment specializes in designing and manufacturing custom weight rooms tailored for schools, colleges, and tactical training professionals. Their product lineup includes a range of durable strength training equipment like power racks, barbells, and accessories, all made to withstand high usage. The company offers personalized services including 3D render consultations to envision the final layout of weight rooms before purchase. With a commitment to exceptional quality, customer service, and a lifetime warranty, Samson Equipment aims to empower athletes and training facilities alike.
National Money Mart Company - Database leaked
January 14, 2026
•[ ransomware, finance, leak ]
National Money Mart Company - Database leaked was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-01-14. Sector: Financial Services. Country: Canada. [AI generated] National Money Mart Company is a financial service provider that offers services like check cashing, payday loans, and money transfers. In a significant event, a database containing sensitive information of its clients was reportedly leaked, raising serious concerns about client data security and privacy.
Kan & Krishme
January 11, 2026
•[ ransomware, hack ]
Kan & Krishme was listed as a victim on the leak site of the sinobi ransomware group; the attack is estimated to have taken place on 2026-01-11. Sector: Professional Services. Country: India. Website: www.kan-krishme.com. Kan and Krishme provides legal information and resources, specifically in the fields of patents, trademarks, design, and advertising law. The company operates under the regulations of the Bar Council of India, emphasizing that it does not solicit work or advertise its services. Their website offers information solely at the user's request, without establishing any lawyer-client relationship. Clients seeking legal advice are encouraged to consult independently for any legal issues.
Nordstrom Rack
January 15, 2026
•[ ransomware, retail ]
Nordstrom Rack was listed as a victim on the leak site of the tengu ransomware group; the attack is estimated to have taken place on 2026-01-15. Sector: Retail & E-Commerce. Country: United States of America. Website: nordstromrack.com. Nordstrom Rack is a company that operates in the Apparel & Accessories Retail industry. It employs 1to4 people and has 500Kto1M of revenue. The company is headquartered in San Jose, California
https://trustarholdingsllc.com/ https://vistlabs.com/
January 14, 2026
•[ ransomware, technology, financial ]
https://trustarholdingsllc.com/ https://vistlabs.com/ was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-01-14. Sector: Professional Services. Country: United States of America. Website: trustarholdingsllc.com. All company data, development drawings, confidential files, investor company files, all financial transactions, equipment, violations, 1.4 TB
Paylogix
January 15, 2026
•[ ransomware, financial, technology ]
Paylogix was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-01-15. Sector: Financial Services. Country: United States of America. Website: paylogix.com. Paylogix is an insuretech pioneer offering premium technology sol
utions that streamline the administration of voluntary benefits.
Their robust suite of services includes enrollment, premium billi
ng, alternative funding, and a software-as-a-service platform tai
lored for groups of all sizes.
We will upload 185gb of corporate data soon. Employee personal in
formation (complete information about 130 employees including SSN
s, passports, DLs and so on), client information, detailed financ
ials, internal confidential files, NDAs and so on.
Neo Group
January 15, 2026
•[ ransomware, technology ]
Neo Group was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-15. Sector: Professional Services. Country: Singapore. Website: www.neogroup.com.sg.
Texas State Utilities
January 15, 2026
•[ ransomware, energy ]
Texas State Utilities was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-15. Sector: Energy & Utilities. Country: United States of America. Website: www.tsu1.com.
Krez & Flores
January 15, 2026
•[ ransomware, finance ]
Krez & Flores was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-15. Country: United States of America. Website: www.krezflores.com.
PSTECHLTD
January 15, 2026
•[ ransomware, technology ]
PSTECHLTD was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-15. Sector: Technology. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.pstechltd.com.
Bergmanis Preyra
January 15, 2026
•[ ransomware, leak ]
Bergmanis Preyra was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-15. Sector: Professional Services. Country: Canada. Website: www.bplawyers.ca.
Aero-Coating
January 15, 2026
•[ ransomware, manufacturing ]
Aero-Coating was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-15. Sector: Manufacturing. Country: Germany. Website: www.aero-coating.de.
1171 Rue Notre Dame O, Victoriaville, QC G6P 7L1, Canada. (819) 758-0313
January 15, 2026
•[ ransomware, technology, manufacturing ]
1171 Rue Notre Dame O, Victoriaville, QC G6P 7L1, Canada. (819) 758-0313 was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-01-15. Sector: Agriculture and Food Production. Country: Canada. Website: soteck.com. Soteck specializes in air treatment, automation, industrial refrigeration, and energy efficiency, catering specifically to the agri-food sector. They provide comprehensive engineering solutions to help clients maintain optimal production conditions for quality products. With over 25 years of experience serving North American food processing plants, their team guarantees performance and client satisfaction. Soteck focuses on creating stable environments to enhance operational efficiency for both agri-food and industrial clients
sjl-legal.com
January 15, 2026
•[ ransomware, finance ]
sjl-legal.com was listed as a victim on the leak site of the ms13089 ransomware group; the attack is estimated to have taken place on 2026-01-15. Sector: Professional Services. Country: Luxembourg. Website: sjl-legal.com. SJL is a high-end independent business law firm renowned for its savoir faire and reliability. The firm has been created in 2010 as an independent alternative investment funds, finance, corporate and insolvency & restructuring boutique law firm...
cirrusaviation
January 16, 2026
•[ ransomware, financial ]
cirrusaviation was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-01-16. Sector: Transportation. Country: United States of America. Cirrus Aviation Services is the largest luxury private jet charter service in Las Vegas.
Laek: 100GB
WE HAS COLLECTED SUCH DATA AS:
- Confidential documents
- Clients Data
- NDA
- Financial data
- Operations
- Corporate data
- Business Agreements
- Development
- Financial databases, all transactions, all clients
And a lot of other VERY IMPORTANT information!
Upper Township
January 15, 2026
•[ ransomware, government ]
Upper Township was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-01-15. Sector: Government & Defense. Country: United States of America. Website: uppertownship.com. A New Jersey local municipal level organization
