CERUMO Co., Ltd
February 5, 2026
•[ ransomware, healthcare ]
CERUMO Co., Ltd was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-02-05. Sector: Healthcare. Country: Japan. Website: cerumo.co.jp. Data size claimed by the group: 0GB. Data is not accessible for now
Hallmark Cards, Inc. & Hallmark Plus
March 31, 2026
•[ ransomware, retail, technology ]
Hallmark Cards, Inc. & Hallmark Plus was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-03-31. Sector: Retail & E-Commerce. Country: United States of America. Over 7.9M Salesforce records containing PII and other internal corporate data have been compromised. This is a final warning to reach out by 2 Apr 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 31 Mar 2026 | Warning: FINAL WARNING
Parque Eólico Toabré
March 31, 2026
•[ ransomware, energy ]
Parque Elico Toabr was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-03-31. Sector: Energy & Utilities. Country: Panama. Website: petoabre.com. [AI generated] Parque Eolico Toabre is a wind farm based in Panama operated by Union Eolica Panamea. With a total capacity of 55 MW produced by 22 wind turbines, it contributes significantly to generating renewable energy. In addition to lowering the country's reliance on fossil fuels, the wind farm represents a sustainable solution for producing electricity.
Q-Lab
March 31, 2026
•[ ransomware, technology ]
Q-Lab was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-03-31. Sector: Technology. Country: United States of America. Website: www.q-lab.com.
Chickasaw Holding
March 31, 2026
•[ ransomware, manufacturing ]
Chickasaw Holding was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-03-31. Sector: Manufacturing. Country: United States of America. Website: www.ctsiok.com.
MerchNOW
March 5, 2026
•[ ransomware, retail, financial ]
MerchNOW was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-03-05. Sector: Retail & E-Commerce. Country: United States of America. Website: merchnow.com. MerchNow is a music merchandising company with over 20 years of e
xperience, specializing in a wide range of products including mus
ic, apparel, accessories, and custom merchandise for bands. They
offer services such as screen printing, record pressing, embroide
ry, and fulfillment to help artists create unique merchandise.
We will upload corporate data soon. Great amount of employee pers
onal documents (passports, DLs, SSNs and other scanned docs), fin
ancials, contracts and agreements, client files, NDA, projects, e
tc.
https://www.lagoonpark.com/
March 31, 2026
•[ ransomware, retail, leak ]
https://www.lagoonpark.com/ was listed as a victim on the leak site of the embargo ransomware group; the attack is estimated to have taken place on 2026-03-31. Sector: Hospitality. Country: United States of America. Website: lagoonpark.com. Lagoon Amusement Park
, located in Farmington, Utah, is a historic family-owned park operating since 1886. It features a combination of roller coasters (includ... - TOTAL QUANTITY 6 TB
IranWire
March 31, 2026
•[ ransomware, hack, technology ]
IranWire was listed as a victim on the leak site of the handala ransomware group; the attack is estimated to have taken place on 2026-03-31. Sector: Technology. Country: Iran. In line with its committed responsibility and dedication to the ideals of the Axis of Resistance, the Handala Cyber Group has successfully carried out a complex and targeted operation, fully hacking and taking control of the hostile outlet IranWire, which was allegedly operating under the direct guidance and support of the CIA. A vast volume
Excel Healthcare Receivable Management &Consulting
March 31, 2026
•[ ransomware, healthcare, leak ]
Excel Healthcare Receivable Management &Consulting was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-03-31. Sector: Healthcare. Country: United States of America. Website: excelhrmc.com. Excel Healthcare is a specialized firm focusing on revenue cycle
management and consulting services for healthcare professionals,
including hospitals and medical practices of all sizes. They offe
r comprehensive services such as accounts receivable management,
insurance follow-up, denial auditing, and consulting on workflow
optimization to enhance cash flow and operational efficiency.
We will upload 54gb of corporate data soon. Employee and customer
personal information, project information, lots of contracts and
agreements, etc.
Dean Supply
March 31, 2026
•[ ransomware, retail, financial ]
Dean Supply was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-03-31. Sector: Retail & E-Commerce. Country: United States of America. Website: shopatdean.com. Dean Supply specializes in providing a comprehensive range of res
taurant supplies and equipment, including kitchenware, dining ess
entials, and janitorial products.
We will upload 15gb of corporate data soon. Employee medical info
rmation and other docs, NDAs, financials, projects, contracts and
agreements, projects, etc.
Cox Design & Metal Fabrication
December 23, 2025
•[ ransomware, manufacturing, financial ]
Cox Design & Metal Fabrication was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-12-23. Sector: Manufacturing. Country: United States of America. Website: cox-design.com. Cox Design and Metal Fabrication, Inc. specializes in custom meta
l design and fabrication, offering a wide range of services inclu
ding aluminum fabrication, architectural steel design, and custom
food trucks.
We will upload 20gb of corporate data soon. Employee personal doc
ument, financials, projects, contracts and agreements, NDA, proje
cts, etc.
submissionfinance.com
March 31, 2026
•[ ransomware, finance ]
submissionfinance.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-03-31. Sector: Financial Services. Country: Australia. Website: submissionfinance.com. Collaborate With Our Expert Consultants Now.
Since 1972, Submission Finance has been your steadfast partner in navigating the ever-changing world of money. Born from a boomers belief in hard work, integrity, and face-to-face relationships, our family-run firm has grown alongside generations of clients, earning trust through transparency and results.At Submission Finance, we dont just manage numbers; we champion your ambitions. Our name says it all: when you submit your financial goals to us, we commit our decades of expertise to crafting personalized strategies, whether youre saving for retirement, expanding a family business, or building your first investment portfolio.
Contact: info@submissionfinance.com
delapazlaw.com
March 31, 2026
•[ ransomware, hack ]
delapazlaw.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-03-31. Sector: Professional Services. Country: United States of America. Website: delapazlaw.com. When you work with the Law Office of Michael R. De La Paz, the only thing you have to worry about is recovering from your injuries. Mr. De La Paz will go to bat for you with the insurance companies and fight them in court to get you the compensation you deserve.
San Felipe Del Rio CISD School
March 31, 2026
•[ ransomware, education ]
San Felipe Del Rio CISD School was listed as a victim on the leak site of the worldleaks ransomware group; the attack is estimated to have taken place on 2026-03-31. Sector: Education. Country: United States of America. Website: www.sfdr-cisd.org. [AI generated] San Felipe Del Rio CISD School is an educational institution located in Del Rio, Texas. It is a public school district that serves students from kindergarten through 12th grade. The district provides various academic programs and extracurricular activities, aiming to prepare its students for higher education and future careers.
Secure Health
March 31, 2026
•[ ransomware, healthcare ]
Secure Health was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-03-31. Sector: Healthcare. Country: United States of America. Website: shpg.com. Provides administrative, care management, and healthy lifestyle services to employers with self-funded, group health care plans
Modern Advanced Print Solutions (MAPS, Inc.)
February 16, 2026
•[ ransomware, manufacturing, technology ]
Modern Advanced Print Solutions (MAPS, Inc.) was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-02-16. Sector: Manufacturing. Country: United States of America. Website: mapsweb.com. Modern Advanced Print Solutions (MAPS, Inc.).
MC-Rx
March 31, 2026
•[ ransomware, healthcare ]
MC-Rx was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-03-31. Sector: Healthcare. Country: United States of America. Website: mc-rx.com. Formerly MC-21 and ProCare PBM
HMI Elements
March 31, 2026
•[ ransomware, technology ]
HMI Elements was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-03-31. Sector: Technology. Country: United Kingdom of Great Britain and Northern Ireland. Website: hmielements.com. The production of reliable human-machine interfaces (HMIs) designed for use in hazardous environments
Green Giftz
March 31, 2026
•[ ransomware, retail ]
Green Giftz was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-03-31. Sector: Retail & E-Commerce. Country: United States of America. Website: greengiftz.com. A certified branded merchandise agency based.
Raphael Ortho
March 31, 2026
•[ ransomware, healthcare ]
Raphael Ortho was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-03-31. Sector: Healthcare. Country: United States of America. Website: morethanstraightteeth.com. A Dental Practice Management Company.