Gastroenterology & Hepatology of CNY
April 14, 2026
•[ ransomware, healthcare, leak ]
Gastroenterology & Hepatology of CNY was listed as a victim on the leak site of the exitium ransomware group; the attack is estimated to have taken place on 2026-04-14. Sector: Healthcare. Country: United States of America. Website: gandhofcny.com. Website: gandhofcny.com
Zoominfo: https://www.zoominfo.com/c/gastroenterology--hepatology-of-cny-pc/346091487
Data sample, whole internal data will be sold if they wouldn't pay ransom.
Also Digestive Disease Center of CNY, LLC (ddcofcny.com)
GI practice + AAAHC-accredited endoscopy center. Syracuse, New York, USA.
Full database for sale 167,303 patients, 124,761 SSN, 49,798 with sensitive diagnoses:
- 167,303 patients 124,761 with SSN, 166,402 (99%) with address, 164,296 (98%) with phone, 85,318 (51%) with email
- 1,093,863 diagnoses (ICD-10), 1,547,142 medications, 186,246 pathology specimens with narrative reports
- Sensitive (dx + meds): 49,798 patients 44,861 with SSN. Mental health: 43,902 | Substance/Alcohol: 5,111 | STIs: 2,779 | Cancer: 2,708 | Hepatitis C: 1,906
- Includes notable individuals (politicians, businesspeople, public figures)
Hacked 0APT
April 14, 2026
•[ ransomware, technology ]
Hacked 0APT was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-04-14. Sector: Technology. Website: Hacked 0APT. Next time, don't play with the big boys.
The response will be fast....
Flash Charm INC - (IDERA)
April 14, 2026
•[ ransomware, technology ]
Flash Charm INC - (IDERA) was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-14. Sector: Technology. Country: United States of America. Website: idera.com. [AI generated] Flash Charm Inc is a software company associated with Idera, Inc., a US-based technology firm headquartered in Houston, Texas. Idera develops and provides database management, developer tools, and test management software solutions. Its products support database administrators and developers across multiple platforms. Flash Charm Inc appears to operate as a subsidiary or affiliated entity within Idera's broader portfolio of software brands serving enterprise IT markets.
bela - pharm
April 15, 2026
•[ ransomware, healthcare ]
bela - pharm was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Healthcare. Country: Germany. Website: www.bela-pharm.com. bela-pharm GmbH specializes in the production of veterinary pharmaceuticals aimed at enhancing animal health. Their product range includes solutions for various livestock such as pigs, cattle, poultry, horses, sheep, goats, and small pets. The company serves veterinarians and international clients, offering expertise in drug production and approval. Committed to quality and innovation, bela-pharm focuses on ensuring safe and effective treatments for animals worldwide.
Curtis Design Group
April 15, 2026
•[ ransomware, leak ]
Curtis Design Group was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Professional Services. Country: United States of America. Website: curtisdesigngroup.com. Curtis Design Group specializes in home architecture and design, creating beautiful and livable spaces tailored to the needs of families and developers. They focus on understanding client dreams and site specifics to produce detailed blueprints that reflect those visions. The company emphasizes a collaborative approach, ensuring clients are delighted with the final designs before working with builders. Their services extend beyond Utah, aiming to create homes that endure and bring joy for generations.
VOLTERRIES
April 15, 2026
•[ ransomware, energy ]
VOLTERRIES was listed as a victim on the leak site of the lamashtu ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Energy & Utilities. Country: France. Website: volterres.fr. Volterres, a subsidiary of the Eiffage group, is reinventing the supply of green electricity for businesses and public sector players.
INDESMALLA
February 20, 2026
•[ ransomware, manufacturing ]
INDESMALLA was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-02-20. Sector: Manufacturing. Country: Argentina. Website: indesmalla.com. Indesmalla is a family business with two production plants, one w
ith raschel machines and the other with Ketten machines. It produ
ces knitted weft (circular) fabric and knitted and finished weft
fabrics in different weights, draws and elasticity.
We will upload corporate data soon. Personal data of employees, f
inancials, contracts and agreements, lots of client files, projec
ts, NDA, internal confidential files and so on.
CIR Realty
April 1, 2026
•[ ransomware, retail, leak ]
CIR Realty was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-04-01. Sector: Professional Services. Country: Canada. Website: cirrealty.ca. Established in 1983, CIR Realty is a real estate brokerage in Can
ada, serving the Central and Southern Alberta markets. They are h
eadquartered in Calgary, Alberta.
We will upload 25gb of corporate data soon. Detailed personal dat
a of employees (names, emails, addresses, phones, photos, persona
l documents) and clients (names, emails, addresses, driver licens
es, phones, payment detailed, account details and so on), detaile
d financials, contracts and agreements, lots of client files, pro
jects, NDA, internal confidential files and so on.
Astreya
April 15, 2026
•[ ransomware, technology ]
Astreya was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Technology. Country: United States of America. Website: astreya.com. [AI generated] Astreya is a US-based IT managed services company headquartered in Sunnyvale, California. It provides technology workforce solutions, IT support, infrastructure management, and digital workplace services to large enterprises. Operating primarily in the information technology services industry, Astreya partners with major technology firms globally, delivering staffing and managed IT services across multiple countries while maintaining its core operations in the United States.
Sampol
April 15, 2026
•[ ransomware, energy, technology ]
Sampol was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Energy & Utilities. Country: Spain. Website: sampol.com. [AI generated] Sampol is a Spanish engineering and services company headquartered in Mallorca, Spain. It operates in the energy, industrial, and infrastructure sectors, offering services such as electrical installations, renewable energy solutions, facility management, and maintenance. The company works across multiple countries, primarily in Spain and international markets, serving both public and private clients in areas including smart grids, sustainability, and industrial automation.
La Maison Bleue France
April 15, 2026
•[ ransomware, retail ]
La Maison Bleue France was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Hospitality. Country: France. Website: la-maison-bleue.fr.
Rogiken / institute of Science Tokyo
April 15, 2026
•[ ransomware, education, technology ]
Rogiken / institute of Science Tokyo was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Education. Country: Japan. Website: rogiken.org. [AI generated] Rogiken is a research organization affiliated with the Institute of Science Tokyo, a Japanese national university formed through the merger of Tokyo Institute of Technology and Tokyo Medical and Dental University. It operates in Japan within the academic and scientific research sector, focusing on advanced engineering, natural sciences, and interdisciplinary studies. The institute supports innovation, technology development, and collaboration between academia and industry.
Kemenpppa
April 15, 2026
•[ ransomware, government ]
Kemenpppa was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Government & Defense. Country: Indonesia. Website: keemenpppa.go.id. [AI generated] Kemenpppa, short for Kementerian Pemberdayaan Perempuan dan Perlindungan Anak, is an Indonesian government ministry responsible for empowering women and protecting children. Operating in Indonesia, it develops and oversees policies related to gender equality, women's rights, child protection, and social welfare. The ministry works to eliminate discrimination, violence, and exploitation affecting women and children across the country.
Millenium Packaging
April 15, 2026
•[ ransomware, manufacturing ]
Millenium Packaging was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Manufacturing. Country: United States of America. Website: mil-pkg.com.
Questivity
April 15, 2026
•[ ransomware, technology ]
Questivity was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Professional Services. Country: United States of America. Website: questivity.com.
Wayne Brothers Construction
April 15, 2026
•[ ransomware, manufacturing, leak ]
Wayne Brothers Construction was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Manufacturing. Country: United States of America. Website: waynebrothers.com.
GL Steel
April 15, 2026
•[ ransomware, manufacturing ]
GL Steel was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Manufacturing. Country: Poland. Website: glsteel.pl.
Superintendency of territorial planning
April 15, 2026
•[ ransomware, government ]
Superintendency of territorial planning was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Government & Defense. Country: Ecuador. Website: sot.gob.ec.
Epoch Times
April 15, 2026
•[ ransomware, technology, leak ]
Epoch Times was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Retail & E-Commerce. Country: United States of America. Website: epochtimes.com. [AI generated] Epoch Times is an American media company founded in 2000 by Chinese-American Falun Gong practitioners. It operates newspapers, websites, and video content across multiple countries, publishing in numerous languages. The company covers news, politics, health, and culture, but has drawn scrutiny from researchers and platforms for spreading misinformation and promoting far-right narratives. It is headquartered in New York, USA.
Vluznet
April 15, 2026
•[ ransomware, technology ]
Vluznet was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-15. Country: United States of America. Website: vluznet.com.
