Grandview Family Medicine
February 8, 2026
•[ ransomware, healthcare ]
Grandview Family Medicine was listed as a victim on the leak site of the medusa ransomware group; the attack is estimated to have taken place on 2026-02-08. Sector: Healthcare. Country: United States of America. Website: grandviewfamilymedicine.com. Ransom demand: 100000. Grandview Family Medicine is a healthcare provider offering a range of services including family medicine, obstetrics, women's health, men's health, and pediatrics. They operate clinics in Provo and Cedar Hills and provide both in-person and telehealth appointments for their patients. The clinic emphasizes comprehensive care, addressing chronic disease management, mental health, urgent visits, and minor procedures. Their intended clients include families and individuals seeking quality healthcare across various age groups.
The company headquarters is located in 1900 North State Street Provo, Utah 84604 United States.
11-50 Employees
Comune di Battipaglia
February 2, 2026
•[ ransomware, government ]
Comune di Battipaglia was listed as a victim on the leak site of the medusa ransomware group; the attack is estimated to have taken place on 2026-02-02. Sector: Government & Defense. Country: Italy. Website: battipaglia.sa.it. Ransom demand: 100000. The Comune di Battipaglia is the official municipal government of Battipaglia, a town in the Province of Salerno in the Campania region of southern Italy. As the local public administration, it oversees civic services, urban planning, public records, community programs, and administrative functions for the towns residents, known as Battipagliesi. The municipality is led by a mayor and council, and its offices are based in Piazza Aldo Moro. Battipaglia is historically an agricultural and industrial centre, famous for its buffalo mozzarella and rich cultural traditions. The Comunes website provides access to local services, news, governance information, and contact details for citizens and visitors.
The company headquarters is located in Piazza Aldo Moro, 84091 Battipaglia (SA), Italia.
30 Employees
South Hays Fire Department
January 29, 2026
•[ ransomware, government ]
South Hays Fire Department was listed as a victim on the leak site of the medusa ransomware group; the attack is estimated to have taken place on 2026-01-29. Sector: Government & Defense. Country: United States of America. Website: southhaysfire.com. Ransom demand: 100000. Hays County Emergency Services District 3 provides essential fire prevention and emergency services to the South Hays County area. The district focuses on recruiting full-time firefighters and is dedicated to community safety and preparedness. In addition to emergency response, the district promotes public knowledge on fire safety and outdoor burning regulations. Their commitment to accessibility ensures that all community members can engage with their services effectively.
The company headquarters is located in 3528 Hunter Road, San Marcos, Texas 78666.
11-50 Employees
Balloons Everywhere
January 29, 2026
•[ ransomware, retail ]
Balloons Everywhere was listed as a victim on the leak site of the medusa ransomware group; the attack is estimated to have taken place on 2026-01-29. Sector: Retail & E-Commerce. Country: United States of America. Website: balloons.com. Ransom demand: 150000. Balloons.com is a wholesale distributor specializing in a wide range of balloon products including foil film, latex balloons, and balloon decoration kits. They cater to various themes, occasions, and licensed characters, offering items for both everyday events and special celebrations. Their services target individuals and businesses looking for party supplies, with a focus on DIY balloon decor and promotional products. Additionally, they provide customers with resources and learning tools related to balloon usage and care.
The company headquarters is located in 16474 Greeno Road, Fairhope, AL 36532-5528, United States.
11-50 Employees
UniTurn Kft.
February 3, 2026
•[ ransomware, manufacturing ]
UniTurn Kft. was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-02-03. Sector: Manufacturing. Country: Hungary. Website: www.uniturn.hu. Data size claimed by the group: 200GB. - Drawing data- HR info-Employee data
RIECO Industries Limited
January 28, 2026
•[ ransomware, manufacturing ]
RIECO Industries Limited was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-01-28. Sector: Manufacturing. Country: India. Website: www.rieco.com. Data size claimed by the group: 10GB. drawing data
Master Handlers
January 29, 2026
•[ ransomware, manufacturing, leak ]
Master Handlers was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-01-29. Sector: Transportation. Country: India. Website: www.masterhandlers.com. Data size claimed by the group: 300GB. - drawing data- employee personal info
Abrahamsom Center
February 1, 2026
•[ ransomware, education ]
Abrahamsom Center was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-02-01. Sector: Education. Country: Israel. Website: www.abrahamson.co.il/en. Data size claimed by the group: 200GB. - customer info-HR data
*e**l I*s***u*e f*r Clinical Research LLC
February 1, 2026
•[ ransomware, healthcare ]
*e**l I*s***u*e f*r Clinical Research LLC was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-02-01. Sector: Healthcare. Country: United States of America. Website: pi-cr.net.
S.Y.L Pastilhas e Sapatas de Freios
January 21, 2026
•[ ransomware, manufacturing ]
S.Y.L Pastilhas e Sapatas de Freios was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-01-21. Sector: Manufacturing. Country: Brazil. Website: www.syl.com.br. [AI generated] "S.Y.L Pastilhas e Sapatas de Freios" is a Brazilian company that specializes in the manufacture and marketing of brake pads and shoes. They provide products for a wide range of vehicles, maintaining focus on quality and performance for its customers. Besides, the company develops and executes technical and commercial training for professionals, promoting expertise in the automotive repair market.
PERLITE, S.L.U
January 16, 2026
•[ ransomware, manufacturing ]
PERLITE, S.L.U was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-01-16. Sector: Manufacturing. Country: Spain. Website: solucionesperlite.com. Data size claimed by the group: 100GB. - Drawings- Customized data according to clients
Adirondack Networks
February 5, 2026
•[ ransomware, technology, leak ]
Adirondack Networks was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-02-05. Sector: Technology. Country: United States of America. Website: adirondacknetworks.com. Data size claimed by the group: 0GB. Internal Documents.
Bigso
February 15, 2026
•[ ransomware, retail, manufacturing ]
Bigso was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-02-15. Sector: Retail & E-Commerce. Country: Sweden. Website: bigso.com. Bigso Box, established in 1963, specializes in premium storage and packaging solutions that are both sustainable and stylish. Their product range includes customizable storage boxes and luxury packaging options designed for homes, offices, and retailers. The company prides itself on its commitment to quality, innovation, and customer service, ensuring efficient and elegant organization solutions. With a focus on eco-friendly materials and manufacturing processes, Bigso Box serves clients looking for functional yet decorative storage solutions.
Oceania Gas Chemicals & Related Products
February 15, 2026
•[ ransomware, energy, healthcare ]
Oceania Gas Chemicals & Related Products was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-02-15. Sector: Energy & Utilities. Country: Samoa. Website: oceaniagas.com. oceaniagas.com zoominfo.com/c/oceania-gas-ltd/414947891 Oceania Gas specializes in providing a wide range of gases including medical gases, industrial gases, and various gas mixtures. They offer an extensive selection of welding equipment, safety PPE, refrigerants, and tools for diverse applications. The company serves clients in need of gas solutions, medical supplies, and welding services across locations in Suva, Lautoka, Labasa, Nadi, and Apia, Samoa. With a commitment to quality and trusted
Copamarina Beach Resort
February 15, 2026
•[ ransomware, retail ]
Copamarina Beach Resort was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-02-15. Sector: Hospitality. Country: Puerto Rico. Website: copamarina.com. copamarina.com zoominfo.com/c/copamarina-beach-resort/1146144172 Discover your ideal vacation at Copamarina Beach Resort and Spa! Book your stay at our beautiful oceanfront hotel destination in Guanica, Puerto Rico.
Global Group
February 15, 2026
•[ ransomware, manufacturing, technology ]
Global Group was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-02-15. Sector: Other. Country: India. Website: globalgroup.co.in. globalgroup.co.in zoominfo.com/c/global-group/437399408 Global Group is a leading construction and real estate company based in Pune, specializing in industrial development and turnkey solutions. With over 15 years of experience, they offer services such as Industrial Park Development, Built-to-Suit lease alternatives, Land Acquisition Solutions, Project Management, and Warehouse Logistics. Their commitment to safety, integrity, and quality has earned them a reputation as a trusted partner
Intsika Yethu Municipality Government
February 15, 2026
•[ ransomware, government ]
Intsika Yethu Municipality Government was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-02-15. Sector: Government & Defense. Country: South Africa. Website: intsikayethu.gov.za. intsikayethu.gov.za zoominfo.com/c/intsika-yethu-municipality/454709330 Intsika Yethu Municipality is an administrative area located in the Chris Hani District of the Eastern Cape, South Africa. The municipality focuses on sustainable development through sound governance and infrastructure provision, catering to the local community's needs. It offers various services including local economic development, community services, and infrastructure planning. The intended clients are the residents
BITS "Business Information Technology Solutions"
February 15, 2026
•[ ransomware, technology ]
BITS "Business Information Technology Solutions" was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-02-15. Sector: Technology. Country: Germany. Website: bits.com.tn. bits.com.tn zoominfo.com/c/bits-business-information-technology-solutions/462382490 Bits is a computer services company that helps businesses solve real technology challenges. Our team works closely with partners across the tech world to create smart solutions for everyday problems. We pride ourselves on our five-star support and quick response times, making sure every client gets the help they need quickly and effectively
CROSS JEANS Zakrt
February 15, 2026
•[ ransomware, retail ]
CROSS JEANS Zakrt was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-02-15. Sector: Retail & E-Commerce. Country: Poland. Website: crossjeans.pl. crossjeans.pl zoominfo.com/c/cross-jeans-zakrt/557783783 Cross Jeans is an online store specializing in denim clothing, offering a wide selection of jeans and apparel for both men and women. The store features various styles, from classic to trendy, including super skinny, mom jeans, and more. In addition to jeans, Cross Jeans provides a range of clothing items such as t-shirts, jackets, and accessories. The company aims to cater to fashion-conscious clients looking for quality denim and stylish
La Rioja Alta
January 30, 2026
•[ ransomware, retail, manufacturing ]
La Rioja Alta was listed as a victim on the leak site of the lynx ransomware group; the attack is estimated to have taken place on 2026-01-30. Sector: Agriculture and Food Production. Country: Spain. Website: www.lariojaalta.com. La Rioja Alta, S.A. is a prominent winery offering a diverse range of wines from renowned Spanish wine regions, including Rioja, Ribera del Duero, and Rias Baixas. The company provides wine tours and experiences to deepen the understanding and appreciation of winemaking, catering to wine enthusiasts and tourists. With multiple wineries under their ownership, their offerings emphasize sustainability and respect for nature, while also focusing on producing high-quality wines.
