Idera -
April 8, 2026
•[ ransomware, technology ]
Idera - was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-08. Sector: Technology. 1.5 TB of data
EasTech
April 8, 2026
•[ ransomware, technology ]
EasTech was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-08. Sector: Technology. Country: Taiwan. Website: eastech.com.
Correios
April 8, 2026
•[ ransomware, technology, government ]
Correios was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-08. Sector: Transportation. Country: Brazil. Website: correios.com.br. [AI generated] Correios, officially known as Empresa Brasileira de Correios e Telgrafos, is the Brazilian state-owned postal service company. Operating under the federal government of Brazil, it provides mail delivery, logistics, and financial services across the country. Founded in 1969, Correios handles package shipping, express delivery, money orders, and e-commerce logistics, serving millions of customers nationwide through thousands of agencies and distribution centers.
KEB
April 8, 2026
•[ ransomware, finance, leak ]
KEB was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-08. Sector: Financial Services. Country: Germany. Website: keb-automation.com. [AI generated] KEB, or Korea Exchange Bank, is a South Korean financial institution offering a wide range of banking and financial services including retail banking, corporate banking, foreign exchange, and trade finance. Headquartered in Seoul, South Korea, it has historically been one of the country's leading banks specializing in international transactions. KEB merged with Hana Bank in 2015 to form KEB Hana Bank, operating under Hana Financial Group.
Balfour Beatty
April 8, 2026
•[ ransomware, manufacturing ]
Balfour Beatty was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-08. Sector: Transportation. Country: United Kingdom of Great Britain and Northern Ireland. Website: balfourbeatty.com. [AI generated] Balfour Beatty is a leading international infrastructure group headquartered in the United Kingdom. The company operates in the construction, engineering, and infrastructure services industry, delivering projects across transportation, power, buildings, and civil engineering sectors. It works across the UK, United States, and other international markets, serving government, public sector, and private clients on major infrastructure and construction programs.
Scholle IPN
April 8, 2026
•[ ransomware, manufacturing, leak ]
Scholle IPN was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-08. Sector: Agriculture and Food Production. Country: United States of America. Website: scholleipn.com. [AI generated] Scholle IPN is a global packaging company headquartered in the United States. It specializes in flexible packaging solutions, including bag-in-box systems, spouted pouches, and aseptic packaging primarily for food, beverage, and industrial liquid markets. The company serves customers across multiple industries worldwide and operates manufacturing facilities in North America, Europe, Asia, and beyond.
Sehlmann Fensterbau
November 22, 2025
•[ ransomware, manufacturing, leak ]
Sehlmann Fensterbau was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-11-22. Sector: Manufacturing. Country: Germany. Website: sehlmann.de. Sehlmann Fensterbau GmbH specializes in wooden and wood-metal win
dows in the Hamburg metropolitan area. They offer optimal window
solutions for innovative new constructions and stylish renovation
s, providing services from consultation and planning to productio
n and installation.
We will upload 44gb of corporate data soon. Employee personal fil
es (passports, DLs, EU IDs and other files), financials, lots of
project files, etc.
Shingle & Gibb Automation
November 12, 2025
•[ ransomware, manufacturing, technology ]
Shingle & Gibb Automation was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-11-12. Sector: Manufacturing. Country: United States of America. Website: shingle.com. Shingle & Gibb Automation follows a time-honored commitment of pr
oviding the finest Industrial Automation & Networking, Motion Con
trol, Machine Safety and Power Transmission products from world l
eading manufacturers, including Siemens, Banner Engineering, Turc
k and Rittal.
We will upload 25gb of corporate data soon. Employee files (passp
orts, DLs and other files), HR files, detailed financials, client
information, NDAs, internal confidential files, etc.
MN Health Insurance Network
March 17, 2026
•[ ransomware, healthcare, finance ]
MN Health Insurance Network was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-03-17. Sector: Healthcare. Country: United States of America. Website: mnhealthnetwork.com. Minnesota Health Insurance Network specializes in providing a wid
e range of health insurance products, including individual and fa
mily plans, group and small business plans, Medicare plans, denta
l and vision insurance, and short-term health insurance.
We will upload 23gb of corporate data soon. Client and employee p
ersonal information (passports, addresses, phones, emails and so
on), projects, financials, contracts and agreements and so on.
ImageMaster
October 13, 2025
•[ ransomware, technology, finance ]
ImageMaster was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-10-13. Sector: Technology. Country: United States of America. Website: imagemaster.com. ImageMaster, LLC is a leading provider of official statement docu
ments and roadshow services tailored for the municipal bond marke
t. They utilize advanced technology and a unique quality assuranc
e process to ensure accurate and secure document preparation and
distribution.
We will upload 49gb of corporate data soon. Employee personal fil
es, clients information, projects, financials, contracts and agre
ements, etc.
Debene S.A. | Página Principal
April 9, 2026
•[ ransomware, manufacturing ]
Debene S.A. | Pgina Principal was listed as a victim on the leak site of the TiMc ransomware group; the attack is estimated to have taken place on 2026-04-09. Sector: Manufacturing. Country: Argentina. Website: debene.com. We've taken down their DC and FS, 100GB+ of the data including PII, Trade record and Full 20GB+ MySQL database backup files
Due to their non-behavior we choose to put them on our shame list , full data breach will take place after the deadline
Seidor
April 9, 2026
•[ ransomware, technology ]
Seidor was listed as a victim on the leak site of the TiMc ransomware group; the attack is estimated to have taken place on 2026-04-09. Sector: Professional Services. Country: Spain. Website: www.seidor.com. On behalf of A IT solution company , the first response to the data breach was trying to cover the truth, shame on you
When the countdown was over, we will public your newest 200GB+ data.
oncologica
April 9, 2026
•[ ransomware, healthcare, leak ]
oncologica was listed as a victim on the leak site of the TiMc ransomware group; the attack is estimated to have taken place on 2026-04-09. Sector: Healthcare. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.oncologica.com. We breached into their intranet and have total control of it , with 1TB+ data exfiltrated including covid-19 database and SaaS src code like oncomine KB and Other PII
Full data breach after the DDL
United Medical Doctors
March 31, 2026
•[ ransomware, healthcare ]
United Medical Doctors was listed as a victim on the leak site of the insomnia ransomware group; the attack is estimated to have taken place on 2026-03-31. Sector: Healthcare. Country: United States of America. Website: www.unitedmd.com. United Medical Doctors (UMD) is an independent multispecialty medicalsurgical group with 70+ Southern California locations and 40+ specialties. They focus on highquality, compassionate care, patient satisfaction, process improvement, outpatient surgery, clinical research.
Powell, Powell & Powell, P.A.
April 6, 2026
•[ ransomware, hack ]
Powell, Powell & Powell, P.A. was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-04-06. Sector: Professional Services. Country: United States of America. Website: powelllawfirm.com. A law firm specializing in personal injury cases
Siegel Lewitter Malkani
April 6, 2026
•[ ransomware, leak ]
Siegel Lewitter Malkani was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-04-06. Sector: Professional Services. Country: United States of America. Website: sl-employmentlaw.com. A highly respected law firm in the San Francisco Bay Area, specializing in employment law
South Florida Injury Centers
April 7, 2026
•[ ransomware, healthcare ]
South Florida Injury Centers was listed as a victim on the leak site of the kairos ransomware group; the attack is estimated to have taken place on 2026-04-07. Sector: Healthcare. Country: United States of America. Website: sflchiro.com. South Florida Injury Centers was founded in 2000 by Dr. Brian Wilner, DC, a graduate of Life University College of Chiropractic. In his 24 years of experience with personal injury and auto accident cases, he has treated and managed conditions of the musculoskeletal system as well as Traumatic Brain Injuries. Conditions treated in the office include whiplash, herniated discs, torticollis, cervical strains, headaches, sciatica, and general low back pain. We pride ourselves in providing both South Florida and the Treasure Coast with great service in Chiropractic care.
Cox, Castle & Nicholson LLP
April 9, 2026
•[ ransomware, leak ]
Cox, Castle & Nicholson LLP was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-04-09. Sector: Professional Services. Country: United States of America. Website: coxcastle.com. Cox, Castle & Nicholson is a leading law firm specializing in real estate and related services, with o
megasurf.co.za
April 8, 2026
•[ ransomware, technology, retail ]
megasurf.co.za was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-04-08. Sector: Retail & E-Commerce. Country: South Africa. Website: megasurf.co.za. Megasurf is an internet service provider and data center operator specializing in high-speed fibre and wireless internet...
Kannarr Eye Care
April 10, 2026
•[ ransomware, healthcare ]
Kannarr Eye Care was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-04-10. Sector: Healthcare. Country: United States of America. Website: kannarreyecare.com. Kannarr Eye Care is a full-service optometry provider located in Pittsburg, Kansas, dedicated to improving lives through advanced eye care. They offer a wide range of services including eye exams, contact lens fittings, cataract surgery, and treatment for ocular diseases. The clinic serves patients in the four-state area, ensuring personalized attention and professional care. Kannarr Eye Care also provides vision financing options and works with various insurance providers to promote good eye health.